You can configure access control for AI Applications at the project
level. To grant access to AI Applications using the console, grant the
Discovery Engine Admin role to a principal for the project that contains the
AI Applications engine.
To grant access to AI Applications, follow the instructions at Grant a
single role in
the IAM documentation using the following guidance:
In step 2, select a project.
In step 4, when selecting a role, enter Discovery Engine in the
filter and then click Discovery Engine Admin.
If you are an owner of the project, you automatically have the Discovery Engine
Admin role for that project.
To grant access to AI Applications for other users, groups, and service
accounts, see Access control with IAM.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eBefore using Vertex AI Search, you must create a Google Cloud project and ensure billing is enabled for it, as well as install and initialize the Google Cloud CLI if you plan to use the API.\u003c/p\u003e\n"],["\u003cp\u003eTo use Vertex AI Agent Builder, you need to activate the service on the Agent Builder page in the Google Cloud console and accept the Discovery Solutions data use terms for each project.\u003c/p\u003e\n"],["\u003cp\u003eAccess control for Vertex AI Agent Builder can be managed at the project level by granting the Discovery Engine Admin role to users, groups, or service accounts, and project owners automatically have this role.\u003c/p\u003e\n"],["\u003cp\u003eTo grant access to other users, groups and service accounts, you should refer to the "Access control with IAM" documentation.\u003c/p\u003e\n"]]],[],null,["# Before you begin\n\nThis page describes the basic start-up tasks that you must complete before\nusing Vertex AI Search.\n\nCreate a project\n----------------\n\nTo create a Google Cloud project for your Vertex AI Search apps and\ndata stores, follow these steps:\n\n1. In the Google Cloud console, on the [project selector\n page](https://console.cloud.google.com/projectselector2/home/dashboard), select or [create a Google Cloud project](/resource-manager/docs/creating-managing-projects).\n\n2. Make sure that billing is enabled for your Google Cloud project. Learn how\n to [check if billing is enabled on a\n project](/billing/docs/how-to/verify-billing-enabled).\n\n3. If you plan to use the API, [install](/sdk/docs/install) and\n [initialize](/sdk/docs/initializing) the Google Cloud CLI.\n\nTurn on AI Applications\n-----------------------\n\nTo use AI Applications, you must activate the AI Applications\nservice.\n\nTo turn on AI Applications, follow these steps:\n\n1. In the Google Cloud console, go to the **AI Applications** page.\n\n [AI Applications](https://console.cloud.google.com/gen-app-builder/start)\n2. Optional: Click **Allow Google to selectively sample model input and\n responses**.\n\n3. Optional: Review the [terms for data use](/retail/data-use-terms).\n\n4. Click **Continue and activate the API**.\n\nAccess control in AI Applications\n---------------------------------\n\nYou can configure access control for AI Applications at the project\nlevel. To grant access to AI Applications using the console, grant the\nDiscovery Engine Admin role to a principal for the project that contains the\nAI Applications engine.\n\nTo grant access to AI Applications, follow the instructions at [Grant a\nsingle role](/iam/docs/granting-changing-revoking-access#iam-grant-single-role-console) in\nthe IAM documentation using the following guidance:\n\n- In step 2, select a project.\n- In step 4, when selecting a role, enter **Discovery Engine** in the filter and then click **Discovery Engine Admin**.\n\nIf you are an owner of the project, you automatically have the Discovery Engine\nAdmin role for that project.\n\nTo grant access to AI Applications for other users, groups, and service\naccounts, see [Access control with IAM](/generative-ai-app-builder/docs/access-control).\n\nIf you are using the API, see\n[Set up authentication on Google Cloud](/generative-ai-app-builder/docs/authentication#on-gcp)\nfor authentication and access control.\n\nWhat's next\n-----------\n\n- [Authenticate to AI Applications](/generative-ai-app-builder/docs/authentication)\n- [Access control with IAM](/generative-ai-app-builder/docs/access-control)"]]
