AI Platform Data Labeling Service roles and permissions
Stay organized with collections Save and categorize content based on your preferences.

This page lists the IAM roles and permissions for AI Platform Data Labeling Service. To search through all roles and permissions, see the role and permission index.

AI Platform Data Labeling Service roles

Role Permissions

Role	Permissions
Data Labeling Service Admin ^Beta (`roles/datalabeling.admin`) Full access to all Data Labeling resources	`datalabeling.*` `datalabeling.annotateddatasets.delete` `datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.label` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.create` `datalabeling.annotationspecsets.delete` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.create` `datalabeling.datasets.delete` `datalabeling.datasets.export` `datalabeling.datasets.get` `datalabeling.datasets.import` `datalabeling.datasets.list` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.create` `datalabeling.instructions.delete` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.cancel` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Data Labeling Service Editor ^Beta (`roles/datalabeling.editor`) Editor of all Data Labeling resources	`datalabeling.*` `datalabeling.annotateddatasets.delete` `datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.label` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.create` `datalabeling.annotationspecsets.delete` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.create` `datalabeling.datasets.delete` `datalabeling.datasets.export` `datalabeling.datasets.get` `datalabeling.datasets.import` `datalabeling.datasets.list` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.create` `datalabeling.instructions.delete` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.cancel` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Gives Data Labeling service account read/write access to Cloud Storage, read/write BigQuery, update CMLE model versions, editor access to Annotation service and AutoML service. Warning: Do not grant service agent roles to any principals except service agents.	`automl.annotationSpecs.` `automl.annotationSpecs.create` `automl.annotationSpecs.delete` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotationSpecs.update` `automl.annotations.` `automl.annotations.approve` `automl.annotations.create` `automl.annotations.list` `automl.annotations.manipulate` `automl.annotations.reject` `automl.columnSpecs.` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.columnSpecs.update` `automl.datasets.create` `automl.datasets.delete` `automl.datasets.export` `automl.datasets.get` `automl.datasets.import` `automl.datasets.list` `automl.datasets.update` `automl.examples.` `automl.examples.delete` `automl.examples.get` `automl.examples.list` `automl.examples.update` `automl.files.` `automl.files.delete` `automl.files.list` `automl.humanAnnotationTasks.` `automl.humanAnnotationTasks.create` `automl.humanAnnotationTasks.delete` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.list` `automl.modelEvaluations.` `automl.modelEvaluations.create` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.create` `automl.models.delete` `automl.models.deploy` `automl.models.export` `automl.models.get` `automl.models.list` `automl.models.predict` `automl.models.undeploy` `automl.operations.` `automl.operations.cancel` `automl.operations.delete` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.` `automl.tableSpecs.get` `automl.tableSpecs.list` `automl.tableSpecs.update` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.jobs.get` `bigquery.tables.create` `bigquery.tables.get` `bigquery.tables.getData` `ml.jobs.create` `ml.jobs.get` `ml.jobs.getIamPolicy` `ml.jobs.list` `ml.locations.` `ml.locations.get` `ml.locations.list` `ml.models.` `ml.models.create` `ml.models.delete` `ml.models.get` `ml.models.getIamPolicy` `ml.models.list` `ml.models.predict` `ml.models.setIamPolicy` `ml.models.update` `ml.operations.get` `ml.operations.list` `ml.projects.getConfig` `ml.studies.` `ml.studies.create` `ml.studies.delete` `ml.studies.get` `ml.studies.getIamPolicy` `ml.studies.list` `ml.studies.setIamPolicy` `ml.trials.` `ml.trials.create` `ml.trials.delete` `ml.trials.get` `ml.trials.list` `ml.trials.update` `ml.versions.` `ml.versions.create` `ml.versions.delete` `ml.versions.get` `ml.versions.list` `ml.versions.predict` `ml.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.services.get` `serviceusage.services.list` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`
Data Labeling Service Viewer ^Beta (`roles/datalabeling.viewer`) Viewer of all Data Labeling resources	`datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.get` `datalabeling.datasets.list` `datalabeling.examples.` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Data Labeling Service Admin ^Beta

(roles/datalabeling.admin)

Full access to all Data Labeling resources

datalabeling.*

datalabeling.annotateddatasets.delete
datalabeling.annotateddatasets.get
datalabeling.annotateddatasets.label
datalabeling.annotateddatasets.list
datalabeling.annotationspecsets.create
datalabeling.annotationspecsets.delete
datalabeling.annotationspecsets.get
datalabeling.annotationspecsets.list
datalabeling.dataitems.get
datalabeling.dataitems.list
datalabeling.datasets.create
datalabeling.datasets.delete
datalabeling.datasets.export
datalabeling.datasets.get
datalabeling.datasets.import
datalabeling.datasets.list
datalabeling.examples.get
datalabeling.examples.list
datalabeling.instructions.create
datalabeling.instructions.delete
datalabeling.instructions.get
datalabeling.instructions.list
datalabeling.operations.cancel
datalabeling.operations.get
datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Data Labeling Service Editor ^Beta

(roles/datalabeling.editor)

Editor of all Data Labeling resources

datalabeling.*

datalabeling.annotateddatasets.delete
datalabeling.annotateddatasets.get
datalabeling.annotateddatasets.label
datalabeling.annotateddatasets.list
datalabeling.annotationspecsets.create
datalabeling.annotationspecsets.delete
datalabeling.annotationspecsets.get
datalabeling.annotationspecsets.list
datalabeling.dataitems.get
datalabeling.dataitems.list
datalabeling.datasets.create
datalabeling.datasets.delete
datalabeling.datasets.export
datalabeling.datasets.get
datalabeling.datasets.import
datalabeling.datasets.list
datalabeling.examples.get
datalabeling.examples.list
datalabeling.instructions.create
datalabeling.instructions.delete
datalabeling.instructions.get
datalabeling.instructions.list
datalabeling.operations.cancel
datalabeling.operations.get
datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Data Labeling Service Agent

(roles/datalabeling.serviceAgent)

Gives Data Labeling service account read/write access to Cloud Storage, read/write BigQuery, update CMLE model versions, editor access to Annotation service and AutoML service.

automl.annotationSpecs.*

automl.annotationSpecs.create
automl.annotationSpecs.delete
automl.annotationSpecs.get
automl.annotationSpecs.list
automl.annotationSpecs.update

automl.annotations.*

automl.annotations.approve
automl.annotations.create
automl.annotations.list
automl.annotations.manipulate
automl.annotations.reject

automl.columnSpecs.*

automl.columnSpecs.get
automl.columnSpecs.list
automl.columnSpecs.update

automl.datasets.create

automl.datasets.delete

automl.datasets.export

automl.datasets.get

automl.datasets.import

automl.datasets.list

automl.datasets.update

automl.examples.*

automl.examples.delete
automl.examples.get
automl.examples.list
automl.examples.update

automl.files.*

automl.files.delete
automl.files.list

automl.humanAnnotationTasks.*

automl.humanAnnotationTasks.create
automl.humanAnnotationTasks.delete
automl.humanAnnotationTasks.get
automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.*

automl.modelEvaluations.create
automl.modelEvaluations.get
automl.modelEvaluations.list

automl.models.create

automl.models.delete

automl.models.deploy

automl.models.export

automl.models.get

automl.models.list

automl.models.predict

automl.models.undeploy

automl.operations.*

automl.operations.cancel
automl.operations.delete
automl.operations.get
automl.operations.list

automl.tableSpecs.*

automl.tableSpecs.get
automl.tableSpecs.list
automl.tableSpecs.update

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.get

bigquery.tables.create

bigquery.tables.get

bigquery.tables.getData

ml.jobs.create

ml.jobs.get

ml.jobs.getIamPolicy

ml.jobs.list

ml.locations.*

ml.locations.get
ml.locations.list

ml.models.*

ml.models.create
ml.models.delete
ml.models.get
ml.models.getIamPolicy
ml.models.list
ml.models.predict
ml.models.setIamPolicy
ml.models.update

ml.operations.get

ml.operations.list

ml.projects.getConfig

ml.studies.*

ml.studies.create
ml.studies.delete
ml.studies.get
ml.studies.getIamPolicy
ml.studies.list
ml.studies.setIamPolicy

ml.trials.*

ml.trials.create
ml.trials.delete
ml.trials.get
ml.trials.list
ml.trials.update

ml.versions.*

ml.versions.create
ml.versions.delete
ml.versions.get
ml.versions.list
ml.versions.predict
ml.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.get

serviceusage.services.list

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Data Labeling Service Viewer ^Beta

(roles/datalabeling.viewer)

Viewer of all Data Labeling resources

datalabeling.annotateddatasets.get

datalabeling.annotateddatasets.list

datalabeling.annotationspecsets.get

datalabeling.annotationspecsets.list

datalabeling.dataitems.*

datalabeling.dataitems.get
datalabeling.dataitems.list

datalabeling.datasets.get

datalabeling.datasets.list

datalabeling.examples.*

datalabeling.examples.get
datalabeling.examples.list

datalabeling.instructions.get

datalabeling.instructions.list

datalabeling.operations.get

datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

AI Platform Data Labeling Service permissions

Permission	Included in roles
`datalabeling.annotateddatasets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotateddatasets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.annotateddatasets.label`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotateddatasets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datalabeling.annotationspecsets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotationspecsets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotationspecsets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`)
`datalabeling.annotationspecsets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datalabeling.dataitems.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.dataitems.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.export`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.datasets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.datasets.import`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.examples.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`)
`datalabeling.examples.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datalabeling.instructions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.instructions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.instructions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`)
`datalabeling.instructions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`)
`datalabeling.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`) Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)

AI Platform Data Labeling Service roles and permissions
Stay organized with collections Save and categorize content based on your preferences.