AutoML roles and permissions

This page lists the IAM roles and permissions for AutoML. To search through all roles and permissions, see the role and permission index.

AutoML roles

Role Permissions

Role	Permissions
AutoML Admin ^Beta (`roles/automl.admin`) Full access to all AutoML resources Lowest-level resources where you can grant this role: Dataset Model	`automl.*` `automl.annotationSpecs.create` `automl.annotationSpecs.delete` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotationSpecs.update` `automl.annotations.approve` `automl.annotations.create` `automl.annotations.list` `automl.annotations.manipulate` `automl.annotations.reject` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.columnSpecs.update` `automl.datasets.create` `automl.datasets.delete` `automl.datasets.export` `automl.datasets.get` `automl.datasets.getIamPolicy` `automl.datasets.import` `automl.datasets.list` `automl.datasets.setIamPolicy` `automl.datasets.update` `automl.examples.delete` `automl.examples.get` `automl.examples.list` `automl.examples.update` `automl.files.delete` `automl.files.list` `automl.humanAnnotationTasks.create` `automl.humanAnnotationTasks.delete` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.getIamPolicy` `automl.locations.list` `automl.locations.setIamPolicy` `automl.modelEvaluations.create` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.create` `automl.models.delete` `automl.models.deploy` `automl.models.export` `automl.models.get` `automl.models.getIamPolicy` `automl.models.list` `automl.models.predict` `automl.models.setIamPolicy` `automl.models.undeploy` `automl.operations.cancel` `automl.operations.delete` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.get` `automl.tableSpecs.list` `automl.tableSpecs.update` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.get` `serviceusage.services.list`
AutoML Editor ^Beta (`roles/automl.editor`) Editor of all AutoML resources Lowest-level resources where you can grant this role: Dataset Model	`automl.annotationSpecs.` `automl.annotationSpecs.create` `automl.annotationSpecs.delete` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotationSpecs.update` `automl.annotations.` `automl.annotations.approve` `automl.annotations.create` `automl.annotations.list` `automl.annotations.manipulate` `automl.annotations.reject` `automl.columnSpecs.` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.columnSpecs.update` `automl.datasets.create` `automl.datasets.delete` `automl.datasets.export` `automl.datasets.get` `automl.datasets.import` `automl.datasets.list` `automl.datasets.update` `automl.examples.` `automl.examples.delete` `automl.examples.get` `automl.examples.list` `automl.examples.update` `automl.files.` `automl.files.delete` `automl.files.list` `automl.humanAnnotationTasks.` `automl.humanAnnotationTasks.create` `automl.humanAnnotationTasks.delete` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.list` `automl.modelEvaluations.` `automl.modelEvaluations.create` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.create` `automl.models.delete` `automl.models.deploy` `automl.models.export` `automl.models.get` `automl.models.list` `automl.models.predict` `automl.models.undeploy` `automl.operations.` `automl.operations.cancel` `automl.operations.delete` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.*` `automl.tableSpecs.get` `automl.tableSpecs.list` `automl.tableSpecs.update` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.get` `serviceusage.services.list`
AutoML Predictor ^Beta (`roles/automl.predictor`) Predict using models Lowest-level resources where you can grant this role: Model	`automl.models.predict` `resourcemanager.projects.get` `resourcemanager.projects.list`
AutoML Service Agent (`roles/automl.serviceAgent`) AutoML service agent can act as Cloud Storage admin and export BigQuery tables, which can be backed by Cloud Storage and Cloud Bigtable. Warning: Do not grant service agent roles to any principals except service agents.	`bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.tables.create` `bigquery.tables.export` `bigquery.tables.get` `bigquery.tables.getData` `bigquery.tables.update` `bigquery.tables.updateData` `bigtable.tables.get` `bigtable.tables.list` `bigtable.tables.readRows` `serviceusage.services.use` `storage.buckets.get` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`
AutoML Viewer ^Beta (`roles/automl.viewer`) Viewer of all AutoML resources Lowest-level resources where you can grant this role: Dataset Model	`automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotations.list` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.datasets.get` `automl.datasets.list` `automl.examples.get` `automl.examples.list` `automl.files.list` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.list` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.get` `automl.models.list` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.get` `automl.tableSpecs.list` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.get` `serviceusage.services.list`

AutoML Admin ^Beta

(roles/automl.admin)

Full access to all AutoML resources

Lowest-level resources where you can grant this role:

Dataset
Model

automl.*

automl.annotationSpecs.create
automl.annotationSpecs.delete
automl.annotationSpecs.get
automl.annotationSpecs.list
automl.annotationSpecs.update
automl.annotations.approve
automl.annotations.create
automl.annotations.list
automl.annotations.manipulate
automl.annotations.reject
automl.columnSpecs.get
automl.columnSpecs.list
automl.columnSpecs.update
automl.datasets.create
automl.datasets.delete
automl.datasets.export
automl.datasets.get
automl.datasets.getIamPolicy
automl.datasets.import
automl.datasets.list
automl.datasets.setIamPolicy
automl.datasets.update
automl.examples.delete
automl.examples.get
automl.examples.list
automl.examples.update
automl.files.delete
automl.files.list
automl.humanAnnotationTasks.create
automl.humanAnnotationTasks.delete
automl.humanAnnotationTasks.get
automl.humanAnnotationTasks.list
automl.locations.get
automl.locations.getIamPolicy
automl.locations.list
automl.locations.setIamPolicy
automl.modelEvaluations.create
automl.modelEvaluations.get
automl.modelEvaluations.list
automl.models.create
automl.models.delete
automl.models.deploy
automl.models.export
automl.models.get
automl.models.getIamPolicy
automl.models.list
automl.models.predict
automl.models.setIamPolicy
automl.models.undeploy
automl.operations.cancel
automl.operations.delete
automl.operations.get
automl.operations.list
automl.tableSpecs.get
automl.tableSpecs.list
automl.tableSpecs.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.get

serviceusage.services.list

AutoML Editor ^Beta

(roles/automl.editor)

Editor of all AutoML resources

Lowest-level resources where you can grant this role:

Dataset
Model

automl.annotationSpecs.*

automl.annotationSpecs.create
automl.annotationSpecs.delete
automl.annotationSpecs.get
automl.annotationSpecs.list
automl.annotationSpecs.update

automl.annotations.*

automl.annotations.approve
automl.annotations.create
automl.annotations.list
automl.annotations.manipulate
automl.annotations.reject

automl.columnSpecs.*

automl.columnSpecs.get
automl.columnSpecs.list
automl.columnSpecs.update

automl.datasets.create

automl.datasets.delete

automl.datasets.export

automl.datasets.get

automl.datasets.import

automl.datasets.list

automl.datasets.update

automl.examples.*

automl.examples.delete
automl.examples.get
automl.examples.list
automl.examples.update

automl.files.*

automl.files.delete
automl.files.list

automl.humanAnnotationTasks.*

automl.humanAnnotationTasks.create
automl.humanAnnotationTasks.delete
automl.humanAnnotationTasks.get
automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.*

automl.modelEvaluations.create
automl.modelEvaluations.get
automl.modelEvaluations.list

automl.models.create

automl.models.delete

automl.models.deploy

automl.models.export

automl.models.get

automl.models.list

automl.models.predict

automl.models.undeploy

automl.operations.*

automl.operations.cancel
automl.operations.delete
automl.operations.get
automl.operations.list

automl.tableSpecs.*

automl.tableSpecs.get
automl.tableSpecs.list
automl.tableSpecs.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.get

serviceusage.services.list

AutoML Predictor ^Beta

(roles/automl.predictor)

Predict using models

Lowest-level resources where you can grant this role:

Model

automl.models.predict

resourcemanager.projects.get

resourcemanager.projects.list

AutoML Service Agent

(roles/automl.serviceAgent)

AutoML service agent can act as Cloud Storage admin and export BigQuery tables, which can be backed by Cloud Storage and Cloud Bigtable.

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.tables.create

bigquery.tables.export

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.update

bigquery.tables.updateData

bigtable.tables.get

bigtable.tables.list

bigtable.tables.readRows

serviceusage.services.use

storage.buckets.get

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

AutoML Viewer ^Beta

(roles/automl.viewer)

Viewer of all AutoML resources

Lowest-level resources where you can grant this role:

Dataset
Model

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotations.list

automl.columnSpecs.get

automl.columnSpecs.list

automl.datasets.get

automl.datasets.list

automl.examples.get

automl.examples.list

automl.files.list

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.get

automl.models.list

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.get

serviceusage.services.list

AutoML permissions

Permission	Included in roles
`automl.annotationSpecs.create`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotationSpecs.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotationSpecs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotationSpecs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotationSpecs.update`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotations.approve`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotations.create`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotations.manipulate`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.annotations.reject`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.columnSpecs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.columnSpecs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.columnSpecs.update`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.datasets.create`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.datasets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.datasets.export`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Translation API Service Agent (`roles/cloudtranslate.serviceAgent`) Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.datasets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Translation API Service Agent (`roles/cloudtranslate.serviceAgent`) Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.datasets.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`automl.datasets.import`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.datasets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Translation API Service Agent (`roles/cloudtranslate.serviceAgent`) Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.datasets.setIamPolicy`	Owner (`roles/owner`) AutoML Admin (`roles/automl.admin`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Security Admin (`roles/iam.securityAdmin`)
`automl.datasets.update`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.examples.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.examples.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.examples.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.examples.update`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.files.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.files.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.humanAnnotationTasks.create`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.humanAnnotationTasks.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.humanAnnotationTasks.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.humanAnnotationTasks.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.locations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.locations.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`automl.locations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.locations.setIamPolicy`	Owner (`roles/owner`) AutoML Admin (`roles/automl.admin`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Security Admin (`roles/iam.securityAdmin`)
`automl.modelEvaluations.create`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.modelEvaluations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.modelEvaluations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.models.create`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.models.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.models.deploy`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.models.export`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.models.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Cloud Translation API Admin (`roles/cloudtranslate.admin`) Cloud Translation API Editor (`roles/cloudtranslate.editor`) Cloud Translation API User (`roles/cloudtranslate.user`) Cloud Translation API Viewer (`roles/cloudtranslate.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Translation Hub Admin (`roles/translationhub.admin`) Translation Hub Portal User (`roles/translationhub.portalUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Translation API Service Agent (`roles/cloudtranslate.serviceAgent`) Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.models.getIamPolicy`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`)
`automl.models.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Translation Hub Admin (`roles/translationhub.admin`) Translation Hub Portal User (`roles/translationhub.portalUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Translation API Service Agent (`roles/cloudtranslate.serviceAgent`) Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.models.predict`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Predictor (`roles/automl.predictor`) Cloud Translation API Admin (`roles/cloudtranslate.admin`) Cloud Translation API Editor (`roles/cloudtranslate.editor`) Cloud Translation API User (`roles/cloudtranslate.user`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Support User (`roles/iam.supportUser`) Translation Hub Admin (`roles/translationhub.admin`) Translation Hub Portal User (`roles/translationhub.portalUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. DocumentAI Core Service Agent (`roles/documentaicore.serviceAgent`) Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.models.setIamPolicy`	Owner (`roles/owner`) AutoML Admin (`roles/automl.admin`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Security Admin (`roles/iam.securityAdmin`)
`automl.models.undeploy`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.operations.delete`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Cloud Translation API Service Agent (`roles/cloudtranslate.serviceAgent`) Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.tableSpecs.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`automl.tableSpecs.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) AutoML Viewer (`roles/automl.viewer`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Firebase Develop Viewer (`roles/firebase.developViewer`) Firebase Viewer (`roles/firebase.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Auditor (`roles/iam.securityAuditor`) Security Reviewer (`roles/iam.securityReviewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)
`automl.tableSpecs.update`	Owner (`roles/owner`) Editor (`roles/editor`) AutoML Admin (`roles/automl.admin`) AutoML Editor (`roles/automl.editor`) Firebase Admin (`roles/firebase.admin`) Firebase Develop Admin (`roles/firebase.developAdmin`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Data Labeling Service Agent (`roles/datalabeling.serviceAgent`)

AutoML roles and permissions

AutoML roles

AutoML Admin Beta

AutoML Editor Beta

AutoML Predictor Beta

AutoML Service Agent

AutoML Viewer Beta

AutoML permissions

automl.annotationSpecs.create

automl.annotationSpecs.delete

automl.annotationSpecs.get

automl.annotationSpecs.list

automl.annotationSpecs.update

automl.annotations.approve

automl.annotations.create

automl.annotations.list

automl.annotations.manipulate

automl.annotations.reject

automl.columnSpecs.get

automl.columnSpecs.list

automl.columnSpecs.update

automl.datasets.create

automl.datasets.delete

automl.datasets.export

automl.datasets.get

automl.datasets.getIamPolicy

automl.datasets.import

automl.datasets.list

automl.datasets.setIamPolicy

automl.datasets.update

automl.examples.delete

automl.examples.get

automl.examples.list

automl.examples.update

automl.files.delete

automl.files.list

automl.humanAnnotationTasks.create

automl.humanAnnotationTasks.delete

automl.humanAnnotationTasks.get

automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.getIamPolicy

automl.locations.list

automl.locations.setIamPolicy

automl.modelEvaluations.create

automl.modelEvaluations.get

automl.modelEvaluations.list

automl.models.create

automl.models.delete

automl.models.deploy

automl.models.export

automl.models.get

automl.models.getIamPolicy

automl.models.list

automl.models.predict

automl.models.setIamPolicy

automl.models.undeploy

automl.operations.cancel

automl.operations.delete

automl.operations.get

automl.operations.list

automl.tableSpecs.get

automl.tableSpecs.list

automl.tableSpecs.update

AutoML Admin ^Beta

AutoML Editor ^Beta

AutoML Predictor ^Beta

AutoML Viewer ^Beta

`automl.annotationSpecs.create`

`automl.annotationSpecs.delete`

`automl.annotationSpecs.get`

`automl.annotationSpecs.list`

`automl.annotationSpecs.update`

`automl.annotations.approve`

`automl.annotations.create`

`automl.annotations.list`

`automl.annotations.manipulate`

`automl.annotations.reject`

`automl.columnSpecs.get`

`automl.columnSpecs.list`

`automl.columnSpecs.update`

`automl.datasets.create`

`automl.datasets.delete`

`automl.datasets.export`

`automl.datasets.get`

`automl.datasets.getIamPolicy`

`automl.datasets.import`

`automl.datasets.list`

`automl.datasets.setIamPolicy`

`automl.datasets.update`

`automl.examples.delete`

`automl.examples.get`

`automl.examples.list`

`automl.examples.update`

`automl.files.delete`

`automl.files.list`

`automl.humanAnnotationTasks.create`

`automl.humanAnnotationTasks.delete`

`automl.humanAnnotationTasks.get`

`automl.humanAnnotationTasks.list`

`automl.locations.get`

`automl.locations.getIamPolicy`

`automl.locations.list`

`automl.locations.setIamPolicy`

`automl.modelEvaluations.create`

`automl.modelEvaluations.get`

`automl.modelEvaluations.list`

`automl.models.create`

`automl.models.delete`

`automl.models.deploy`

`automl.models.export`

`automl.models.get`

`automl.models.getIamPolicy`

`automl.models.list`

`automl.models.predict`

`automl.models.setIamPolicy`

`automl.models.undeploy`

`automl.operations.cancel`

`automl.operations.delete`

`automl.operations.get`

`automl.operations.list`

`automl.tableSpecs.get`

`automl.tableSpecs.list`

`automl.tableSpecs.update`