[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-09-04 (世界標準時間)。"],[[["\u003cp\u003eGoogle Distributed Cloud (GDC) air-gapped uses Identity and Access Management (IAM) to control access to Vertex AI services, adhering to the principle of least privilege.\u003c/p\u003e\n"],["\u003cp\u003eIAM roles, which are sets of permissions for specific actions, must be assigned to users, groups, or service accounts to enable the use of Vertex AI services.\u003c/p\u003e\n"],["\u003cp\u003ePredefined roles at both the organization and project levels dictate the permissions granted to users, and appropriate admin permissions need to be requested to utilize the services.\u003c/p\u003e\n"],["\u003cp\u003eThere are specific Vertex AI service roles detailed on the page, each linked to a Kubernetes resource name and a description of the access it provides.\u003c/p\u003e\n"],["\u003cp\u003eIf a user cannot access or use a Vertex AI service, they must request the necessary roles from their Project or Organization IAM Admin.\u003c/p\u003e\n"]]],[],null,["# Prepare IAM permissions\n\nThis page outlines the Identity and Access Management (IAM) roles and permissions necessary for requesting resource access from your Organization and Project IAM administrators. You can use this information to make sure you have the appropriate access for developing applications with Vertex AI features in Google Distributed Cloud (GDC) air-gapped environments.\n\n\u003cbr /\u003e\n\nThis page is for application developers within application operator groups who are responsible for integrating AI features into secure air-gapped applications. For more information, see [Audiences for GDC air-gapped documentation](/distributed-cloud/hosted/docs/latest/gdch/resources/audiences).\n\nGDC air-gapped uses IAM roles and permissions to manage access to resources at the organizational and project level. An IAM role is a collection of specific permissions mapped to actions on resources. A role is assigned by the organizational or project administrator to a user or service account.\n\nYou must request IAM roles and permissions before you can begin integrating Vertex AI features into your air-gapped applications:\n\n- **To request organizational-level access**: Contact your Organization IAM Admin. They grant roles and permissions for setting up Vertex AI within an organization and managing the lifecycle of projects that use AI services.\n\n- **To request project-level access**: Contact your Project IAM administrator to request project-specific roles and permissions. All Vertex AI roles must bind to the project namespace where you're using the service.\n\nFor details, see\n| **Tip:** It's important to grant and request access using the [principle of least privilege](/distributed-cloud/hosted/docs/latest/gdch//resources/permissions#preinciple-of-least-privilege), to verify you have access to only the minimum necessary permissions for your task. This keeps your resources secure and protects it from unwanted access.\n\nPredefined roles at the organization level\n------------------------------------------\n\nThe following table provides details about the permissions assigned to each\npredefined role:\n\nPredefined roles at the project level\n-------------------------------------\n\nThe following table provides details about the permissions assigned to each\npredefined role:"]]
