Vertex AI IAM permissions

The following table lists common Vertex AI operations and the permissions that they require.

To determine if one or more permissions are included in a Vertex AI IAM role, you can use one of the following methods:

• The gcloud iam roles describe command
• The roles.get() method in the IAM API

Resource	Operation	Permissions needed
batchPredictionJobs	Cancel a batchPredictionJob	aiplatform.batchPredictionJobs.cancel (permission needed on the name resource)
batchPredictionJobs	Create a batchPredictionJob	aiplatform.batchPredictionJobs.create (permission needed on the parent resource)
batchPredictionJobs	Delete a batchPredictionJob ^† ^† Starts a long-running operation	aiplatform.batchPredictionJobs.delete (permission needed on the name resource) Other permissions: aiplatform.batchPredictionJobs.get (to call GET on the long-running operation returned) aiplatform.batchPredictionJobs.get (to call DELETE on the long-running operation returned) aiplatform.batchPredictionJobs.get (to call WAIT on the long-running operation returned) aiplatform.batchPredictionJobs.delete (to call CANCEL on the long-running operation returned)
batchPredictionJobs	Get a batchPredictionJob	aiplatform.batchPredictionJobs.get (permission needed on the name resource)
batchPredictionJobs	List a batchPredictionJob	aiplatform.batchPredictionJobs.list (permission needed on the parent resource)
customJobs	Cancel a customJob	aiplatform.customJobs.cancel (permission needed on the name resource)
customJobs	Create a customJob	aiplatform.customJobs.create (permission needed on the parent resource)
customJobs	Delete a customJob ^† ^† Starts a long-running operation	aiplatform.customJobs.delete (permission needed on the name resource) Other permissions: aiplatform.customJobs.get (to call GET on the long-running operation returned) aiplatform.customJobs.get (to call DELETE on the long-running operation returned) aiplatform.customJobs.get (to call WAIT on the long-running operation returned) aiplatform.customJobs.delete (to call CANCEL on the long-running operation returned)
customJobs	Get a customJob	aiplatform.customJobs.get (permission needed on the name resource)
customJobs	List a customJob	aiplatform.customJobs.list (permission needed on the parent resource)
datasets	Create a dataset ^† ^† Starts a long-running operation	aiplatform.datasets.create (permission needed on the parent resource) Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
datasets	Delete a dataset ^† ^† Starts a long-running operation	aiplatform.datasets.delete (permission needed on the name resource) Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.delete (to call CANCEL on the long-running operation returned)
datasets	Export a dataset ^† ^† Starts a long-running operation	aiplatform.datasets.export (permission needed on the name resource) Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.export (to call CANCEL on the long-running operation returned)
datasets	Get a dataset	aiplatform.datasets.get (permission needed on the name resource)
datasets	Import a dataset ^† ^† Starts a long-running operation	aiplatform.datasets.import (permission needed on the name resource) Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.import (to call CANCEL on the long-running operation returned)
datasets	List a dataset	aiplatform.datasets.list (permission needed on the parent resource)
datasets	Update a dataset	aiplatform.datasets.update (permission needed on the name resource)
datasets.annotationSpecs	Get a dataset's annotationSpecs	aiplatform.annotationSpecs.get (permission needed on the name resource)
datasets.dataItems	List a dataset's dataItems	aiplatform.dataItems.list (permission needed on the parent resource)
datasets.dataItems.annotations	List a dataset.dataItems.annotations	aiplatform.annotations.list (permission needed on the parent resource)
datasets.savedQueries	Lists SavedQueries in a Dataset.	aiplatform.datasets.get (permission needed on the parent resource)
endpoints	Create an endpoint ^† ^† Starts a long-running operation	aiplatform.endpoints.create (permission needed on the parent resource) Other permissions: aiplatform.endpoints.get (to call GET on the long-running operation returned) aiplatform.endpoints.update (to call DELETE on the long-running operation returned) aiplatform.endpoints.get (to call WAIT on the long-running operation returned) aiplatform.endpoints.update (to call CANCEL on the long-running operation returned)
endpoints	Delete an endpoint ^† ^† Starts a long-running operation	aiplatform.endpoints.delete (permission needed on the name resource) Other permissions: aiplatform.endpoints.get (to call GET on the long-running operation returned) aiplatform.endpoints.update (to call DELETE on the long-running operation returned) aiplatform.endpoints.get (to call WAIT on the long-running operation returned) aiplatform.endpoints.delete (to call CANCEL on the long-running operation returned)
endpoints	Deploy model to an endpoint ^† ^† Starts a long-running operation	aiplatform.endpoints.deploy (permission needed on the endpoint resource) Other permissions: aiplatform.endpoints.get (to call GET on the long-running operation returned) aiplatform.endpoints.update (to call DELETE on the long-running operation returned) aiplatform.endpoints.get (to call WAIT on the long-running operation returned) aiplatform.endpoints.deploy (to call CANCEL on the long-running operation returned)
endpoints	Explain an endpoint	aiplatform.endpoints.explain (permission needed on the endpoint resource)
endpoints	Get an endpoint	aiplatform.endpoints.get (permission needed on the name resource)
endpoints	List an endpoint	aiplatform.endpoints.list (permission needed on the parent resource)
endpoints	Update an endpoint	aiplatform.endpoints.update (permission needed on the name resource)
endpoints	Predict an endpoint	aiplatform.endpoints.predict (permission needed on the endpoint resource)
endpoints	Perform an online prediction with an arbitrary HTTP payload.	aiplatform.endpoints.predict (permission needed on the endpoint resource)
endpoints	Undeploy a model to an endpoint ^† ^† Starts a long-running operation	aiplatform.endpoints.undeploy (permission needed on the endpoint resource) Other permissions: aiplatform.endpoints.get (to call GET on the long-running operation returned) aiplatform.endpoints.update (to call DELETE on the long-running operation returned) aiplatform.endpoints.get (to call WAIT on the long-running operation returned) aiplatform.endpoints.undeploy (to call CANCEL on the long-running operation returned)
featurestores	Batch reads Feature values from a Featurestore. ^† ^† Starts a long-running operation	aiplatform.featurestores.batchReadFeatureValues (permission needed on the featurestore resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.batchReadFeatureValues (to call CANCEL on the long-running operation returned)
featurestores	Creates a new Featurestore in a given project and location. ^† ^† Starts a long-running operation	aiplatform.featurestores.create (permission needed on the parent resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.update (to call CANCEL on the long-running operation returned)
featurestores	Deletes a single Featurestore. ^† ^† Starts a long-running operation	aiplatform.featurestores.delete (permission needed on the name resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned)
featurestores	Gets details of a single Featurestore.	aiplatform.featurestores.get (permission needed on the name resource)
featurestores	Lists Featurestores in a given project and location.	aiplatform.featurestores.list (permission needed on the parent resource)
featurestores	Updates the parameters of a single Featurestore. ^† ^† Starts a long-running operation	aiplatform.featurestores.update (permission needed on the name resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned)
featurestores	Searches Features matching a query in a given project.	aiplatform.features.list (permission needed on the location resource)
featurestores.entityTypes	Creates a new EntityType in a given Featurestore. ^† ^† Starts a long-running operation	aiplatform.entityTypes.create (permission needed on the parent resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.update (to call CANCEL on the long-running operation returned)
featurestores.entityTypes	Deletes a single EntityType. ^† ^† Starts a long-running operation	aiplatform.entityTypes.delete (permission needed on the name resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.update (to call CANCEL on the long-running operation returned)
featurestores.entityTypes	Exports Feature values from all the entities of a target EntityType. ^† ^† Starts a long-running operation	aiplatform.entityTypes.exportFeatureValues (permission needed on the entityType resource) Other permissions: aiplatform.entityTypes.get (to call GET on the long-running operation returned) aiplatform.entityTypes.update (to call DELETE on the long-running operation returned) aiplatform.entityTypes.get (to call WAIT on the long-running operation returned) aiplatform.entityTypes.exportFeatureValues (to call CANCEL on the long-running operation returned)
featurestores.entityTypes	Gets details of a single EntityType.	aiplatform.entityTypes.get (permission needed on the name resource)
featurestores.entityTypes	Imports Feature values into the Featurestore from a source storage. ^† ^† Starts a long-running operation	aiplatform.entityTypes.importFeatureValues (permission needed on the entityType resource) Other permissions: aiplatform.entityTypes.get (to call GET on the long-running operation returned) aiplatform.entityTypes.update (to call DELETE on the long-running operation returned) aiplatform.entityTypes.get (to call WAIT on the long-running operation returned) aiplatform.entityTypes.importFeatureValues (to call CANCEL on the long-running operation returned)
featurestores.entityTypes	Lists EntityTypes in a given Featurestore.	aiplatform.entityTypes.list (permission needed on the parent resource)
featurestores.entityTypes	Updates the parameters of a single EntityType.	aiplatform.entityTypes.update (permission needed on the name resource)
featurestores.entityTypes	Reads Feature values of a specific entity of an EntityType.	aiplatform.entityTypes.readFeatureValues (permission needed on the entityType resource)
featurestores.entityTypes	Reads Feature values for multiple entities.	aiplatform.entityTypes.streamingReadFeatureValues (permission needed on the entityType resource)
featurestores.entityTypes.features	Creates a batch of Features in a given EntityType. ^† ^† Starts a long-running operation	aiplatform.features.create (permission needed on the parent resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.update (to call CANCEL on the long-running operation returned)
featurestores.entityTypes.features	Creates a new Feature in a given EntityType. ^† ^† Starts a long-running operation	aiplatform.features.create (permission needed on the parent resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.update (to call CANCEL on the long-running operation returned)
featurestores.entityTypes.features	Deletes a single Feature. ^† ^† Starts a long-running operation	aiplatform.features.delete (permission needed on the name resource) Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.update (to call CANCEL on the long-running operation returned)
featurestores.entityTypes.features	Gets details of a single Feature.	aiplatform.features.get (permission needed on the name resource)
featurestores.entityTypes.features	Lists Features in a given EntityType.	aiplatform.features.list (permission needed on the parent resource)
featurestores.entityTypes.features	Updates the paramters of a single Feature	aiplatform.features.update (permission needed on the name resource)
hyperparameterTuningJobs	Cancel a hyperparameterTuningJob	aiplatform.hyperparameterTuningJobs.cancel (permission needed on the name resource)
hyperparameterTuningJobs	Create a hyperparameterTuningJob	aiplatform.hyperparameterTuningJobs.create (permission needed on the parent resource)
hyperparameterTuningJobs	Delete a hyperparameterTuningJob	aiplatform.hyperparameterTuningJobs.delete (permission needed on the name resource)
hyperparameterTuningJobs	Get a hyperparameterTuningJob	aiplatform.hyperparameterTuningJobs.get (permission needed on the name resource)
hyperparameterTuningJobs	List a hyperparameterTuningJob	aiplatform.hyperparameterTuningJobs.list (permission needed on the parent resource)
indexEndpoints	Creates an IndexEndpoint. ^† ^† Starts a long-running operation	aiplatform.indexEndpoints.create (permission needed on the parent resource) Other permissions: aiplatform.indexEndpoints.get (to call GET on the long-running operation returned) aiplatform.indexEndpoints.update (to call DELETE on the long-running operation returned) aiplatform.indexEndpoints.get (to call WAIT on the long-running operation returned) aiplatform.indexEndpoints.update (to call CANCEL on the long-running operation returned)
indexEndpoints	Deletes an IndexEndpoint. ^† ^† Starts a long-running operation	aiplatform.indexEndpoints.delete (permission needed on the name resource) Other permissions: aiplatform.indexEndpoints.get (to call GET on the long-running operation returned) aiplatform.indexEndpoints.update (to call DELETE on the long-running operation returned) aiplatform.indexEndpoints.get (to call WAIT on the long-running operation returned) aiplatform.indexEndpoints.update (to call CANCEL on the long-running operation returned)
indexEndpoints	Deploys an Index into this IndexEndpoint, creating a DeployedIndex within it. ^† ^† Starts a long-running operation	aiplatform.indexEndpoints.deploy (permission needed on the indexEndpoint resource) Other permissions: aiplatform.indexEndpoints.get (to call GET on the long-running operation returned) aiplatform.indexEndpoints.update (to call DELETE on the long-running operation returned) aiplatform.indexEndpoints.get (to call WAIT on the long-running operation returned) aiplatform.indexEndpoints.update (to call CANCEL on the long-running operation returned)
indexEndpoints	Gets an IndexEndpoint.	aiplatform.indexEndpoints.get (permission needed on the name resource)
indexEndpoints	Lists IndexEndpoints in a Location.	aiplatform.indexEndpoints.list (permission needed on the parent resource)
indexEndpoints	Update an existing DeployedIndex under an IndexEndpoint. ^† ^† Starts a long-running operation	aiplatform.indexEndpoints.deploy (permission needed on the indexEndpoint resource) Other permissions: aiplatform.indexEndpoints.get (to call GET on the long-running operation returned) aiplatform.indexEndpoints.update (to call DELETE on the long-running operation returned) aiplatform.indexEndpoints.get (to call WAIT on the long-running operation returned) aiplatform.indexEndpoints.update (to call CANCEL on the long-running operation returned)
indexEndpoints	Updates an IndexEndpoint.	aiplatform.indexEndpoints.update (permission needed on the name resource)
indexEndpoints	Undeploys an Index from an IndexEndpoint, removing a DeployedIndex from it, and freeing all resources it's using. ^† ^† Starts a long-running operation	aiplatform.indexEndpoints.undeploy (permission needed on the indexEndpoint resource) Other permissions: aiplatform.indexEndpoints.get (to call GET on the long-running operation returned) aiplatform.indexEndpoints.update (to call DELETE on the long-running operation returned) aiplatform.indexEndpoints.get (to call WAIT on the long-running operation returned) aiplatform.indexEndpoints.update (to call CANCEL on the long-running operation returned)
indexes	Creates an Index. ^† ^† Starts a long-running operation	aiplatform.indexes.create (permission needed on the parent resource) Other permissions: aiplatform.indexes.get (to call GET on the long-running operation returned) aiplatform.indexes.update (to call DELETE on the long-running operation returned) aiplatform.indexes.get (to call WAIT on the long-running operation returned) aiplatform.indexes.update (to call CANCEL on the long-running operation returned)
indexes	Deletes an Index. ^† ^† Starts a long-running operation	aiplatform.indexes.delete (permission needed on the name resource) Other permissions: aiplatform.indexes.get (to call GET on the long-running operation returned) aiplatform.indexes.update (to call DELETE on the long-running operation returned) aiplatform.indexes.get (to call WAIT on the long-running operation returned) aiplatform.indexes.update (to call CANCEL on the long-running operation returned)
indexes	Gets an Index.	aiplatform.indexes.get (permission needed on the name resource)
indexes	Lists Indexes in a Location.	aiplatform.indexes.list (permission needed on the parent resource)
indexes	Updates an Index. ^† ^† Starts a long-running operation	aiplatform.indexes.update (permission needed on the name resource) Other permissions: aiplatform.indexes.get (to call GET on the long-running operation returned) aiplatform.indexes.update (to call DELETE on the long-running operation returned) aiplatform.indexes.get (to call WAIT on the long-running operation returned) aiplatform.indexes.update (to call CANCEL on the long-running operation returned)
metadataStores	Initializes a MetadataStore, including allocation of resources. ^† ^† Starts a long-running operation	aiplatform.metadataStores.create (permission needed on the parent resource) Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned) aiplatform.locations.get (to call WAIT on the long-running operation returned) aiplatform.locations.get (to call CANCEL on the long-running operation returned)
metadataStores	Deletes a single MetadataStore and all its child resources (Artifacts, Executions, and Contexts). ^† ^† Starts a long-running operation	aiplatform.metadataStores.delete (permission needed on the name resource) Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned) aiplatform.locations.get (to call WAIT on the long-running operation returned) aiplatform.locations.get (to call CANCEL on the long-running operation returned)
metadataStores	Retrieves a specific MetadataStore.	aiplatform.metadataStores.get (permission needed on the name resource)
metadataStores	Lists MetadataStores for a Location.	aiplatform.metadataStores.list (permission needed on the parent resource)
metadataStores.artifacts	Creates an Artifact associated with a MetadataStore.	aiplatform.artifacts.create (permission needed on the parent resource)
metadataStores.artifacts	Deletes an Artifact. ^† ^† Starts a long-running operation	aiplatform.artifacts.delete (permission needed on the name resource) Other permissions: aiplatform.artifacts.get (to call GET on the long-running operation returned) aiplatform.artifacts.delete (to call DELETE on the long-running operation returned) aiplatform.artifacts.get (to call WAIT on the long-running operation returned) aiplatform.artifacts.delete (to call CANCEL on the long-running operation returned)
metadataStores.artifacts	Retrieves a specific Artifact.	aiplatform.artifacts.get (permission needed on the name resource)
metadataStores.artifacts	Lists Artifacts in the MetadataStore.	aiplatform.artifacts.list (permission needed on the parent resource)
metadataStores.artifacts	Updates a stored Artifact.	aiplatform.artifacts.update (permission needed on the name resource)
metadataStores.artifacts	Purges Artifacts. ^† ^† Starts a long-running operation	aiplatform.artifacts.delete (permission needed on the parent resource) Other permissions: aiplatform.artifacts.get (to call GET on the long-running operation returned) aiplatform.artifacts.delete (to call DELETE on the long-running operation returned) aiplatform.artifacts.get (to call WAIT on the long-running operation returned) aiplatform.artifacts.delete (to call CANCEL on the long-running operation returned)
metadataStores.artifacts	Retrieves lineage of an Artifact represented through Artifacts and Executions connected by Event edges and returned as a LineageSubgraph.	aiplatform.artifacts.get (permission needed on the artifact resource)
metadataStores.contexts	Adds a set of Artifacts and Executions to a Context.	aiplatform.contexts.addContextArtifactsAndExecutions (permission needed on the context resource)
metadataStores.contexts	Adds a set of Contexts as children to a parent Context.	aiplatform.contexts.addContextChildren (permission needed on the context resource)
metadataStores.contexts	Creates a Context associated with a MetadataStore.	aiplatform.contexts.create (permission needed on the parent resource)
metadataStores.contexts	Deletes a stored Context. ^† ^† Starts a long-running operation	aiplatform.contexts.delete (permission needed on the name resource) Other permissions: aiplatform.contexts.get (to call GET on the long-running operation returned) aiplatform.contexts.delete (to call DELETE on the long-running operation returned) aiplatform.contexts.get (to call WAIT on the long-running operation returned) aiplatform.contexts.delete (to call CANCEL on the long-running operation returned)
metadataStores.contexts	Retrieves a specific Context.	aiplatform.contexts.get (permission needed on the name resource)
metadataStores.contexts	Lists Contexts on the MetadataStore.	aiplatform.contexts.list (permission needed on the parent resource)
metadataStores.contexts	Updates a stored Context.	aiplatform.contexts.update (permission needed on the name resource)
metadataStores.contexts	Purges Contexts. ^† ^† Starts a long-running operation	aiplatform.contexts.delete (permission needed on the parent resource) Other permissions: aiplatform.contexts.get (to call GET on the long-running operation returned) aiplatform.contexts.delete (to call DELETE on the long-running operation returned) aiplatform.contexts.get (to call WAIT on the long-running operation returned) aiplatform.contexts.delete (to call CANCEL on the long-running operation returned)
metadataStores.contexts	Retrieves Artifacts and Executions within the specified Context, connected by Event edges and returned as a LineageSubgraph.	aiplatform.contexts.queryContextLineageSubgraph (permission needed on the context resource)
metadataStores.executions	Adds Events to the specified Execution.	aiplatform.executions.addExecutionEvents (permission needed on the execution resource)
metadataStores.executions	Creates an Execution associated with a MetadataStore.	aiplatform.executions.create (permission needed on the parent resource)
metadataStores.executions	Deletes an Execution. ^† ^† Starts a long-running operation	aiplatform.executions.delete (permission needed on the name resource) Other permissions: aiplatform.executions.get (to call GET on the long-running operation returned) aiplatform.executions.delete (to call DELETE on the long-running operation returned) aiplatform.executions.get (to call WAIT on the long-running operation returned) aiplatform.executions.delete (to call CANCEL on the long-running operation returned)
metadataStores.executions	Retrieves a specific Execution.	aiplatform.executions.get (permission needed on the name resource)
metadataStores.executions	Lists Executions in the MetadataStore.	aiplatform.executions.list (permission needed on the parent resource)
metadataStores.executions	Updates a stored Execution.	aiplatform.executions.update (permission needed on the name resource)
metadataStores.executions	Purges Executions. ^† ^† Starts a long-running operation	aiplatform.executions.delete (permission needed on the parent resource) Other permissions: aiplatform.executions.get (to call GET on the long-running operation returned) aiplatform.executions.delete (to call DELETE on the long-running operation returned) aiplatform.executions.get (to call WAIT on the long-running operation returned) aiplatform.executions.delete (to call CANCEL on the long-running operation returned)
metadataStores.executions	Obtains the set of input and output Artifacts for this Execution, in the form of LineageSubgraph that also contains the Execution and connecting Events.	aiplatform.executions.queryExecutionInputsAndOutputs (permission needed on the execution resource)
metadataStores.metadataSchemas	Creates a MetadataSchema.	aiplatform.metadataSchemas.create (permission needed on the parent resource)
metadataStores.metadataSchemas	Retrieves a specific MetadataSchema.	aiplatform.metadataSchemas.get (permission needed on the name resource)
metadataStores.metadataSchemas	Lists MetadataSchemas.	aiplatform.metadataSchemas.list (permission needed on the parent resource)
migratableResources	Batchmigrate a migratableResource	aiplatform.migratableResources.migrate (permission needed on the parent resource)
migratableResources	Search a migratableResource	aiplatform.migratableResources.search (permission needed on the parent resource)
modelDeploymentMonitoringJobs	Creates a ModelDeploymentMonitoringJob.	aiplatform.modelDeploymentMonitoringJobs.create (permission needed on the parent resource)
modelDeploymentMonitoringJobs	Deletes a ModelDeploymentMonitoringJob. ^† ^† Starts a long-running operation	aiplatform.modelDeploymentMonitoringJobs.delete (permission needed on the name resource) Other permissions: aiplatform.indexes.get (to call GET on the long-running operation returned) aiplatform.indexes.update (to call DELETE on the long-running operation returned) aiplatform.indexes.get (to call WAIT on the long-running operation returned) aiplatform.indexes.update (to call CANCEL on the long-running operation returned)
modelDeploymentMonitoringJobs	Gets a ModelDeploymentMonitoringJob.	aiplatform.modelDeploymentMonitoringJobs.get (permission needed on the name resource)
modelDeploymentMonitoringJobs	Lists ModelDeploymentMonitoringJobs in a Location.	aiplatform.modelDeploymentMonitoringJobs.list (permission needed on the parent resource)
modelDeploymentMonitoringJobs	Updates a ModelDeploymentMonitoringJob. ^† ^† Starts a long-running operation	aiplatform.modelDeploymentMonitoringJobs.update (permission needed on the name resource) Other permissions: aiplatform.modelDeploymentMonitoringJobs.get (to call GET on the long-running operation returned) aiplatform.modelDeploymentMonitoringJobs.update (to call DELETE on the long-running operation returned)
modelDeploymentMonitoringJobs	Pauses a ModelDeploymentMonitoringJob.	aiplatform.modelDeploymentMonitoringJobs.pause (permission needed on the name resource)
modelDeploymentMonitoringJobs	Resumes a paused ModelDeploymentMonitoringJob.	aiplatform.modelDeploymentMonitoringJobs.resume (permission needed on the name resource)
modelDeploymentMonitoringJobs	Searches Model Monitoring Statistics generated within a given time window.	aiplatform.modelDeploymentMonitoringJobs.searchStatsAnomalies (permission needed on the modelDeploymentMonitoringJob resource)
models	Delete a model ^† ^† Starts a long-running operation	aiplatform.models.delete (permission needed on the name resource) Other permissions: aiplatform.models.get (to call GET on the long-running operation returned) aiplatform.models.get (to call DELETE on the long-running operation returned) aiplatform.models.get (to call WAIT on the long-running operation returned) aiplatform.models.delete (to call CANCEL on the long-running operation returned)
models	Export a model ^† ^† Starts a long-running operation	aiplatform.models.export (permission needed on the name resource) Other permissions: aiplatform.models.get (to call GET on the long-running operation returned) aiplatform.models.get (to call DELETE on the long-running operation returned) aiplatform.models.get (to call WAIT on the long-running operation returned) aiplatform.models.export (to call CANCEL on the long-running operation returned)
models	Get a model	aiplatform.models.get (permission needed on the name resource)
models	List a model	aiplatform.models.list (permission needed on the parent resource)
models	Update a model	aiplatform.models.update (permission needed on the name resource)
models	Upload a model ^† ^† Starts a long-running operation	aiplatform.models.upload (permission needed on the parent resource) Other permissions: aiplatform.models.get (to call GET on the long-running operation returned) aiplatform.models.get (to call DELETE on the long-running operation returned) aiplatform.models.get (to call WAIT on the long-running operation returned) aiplatform.models.update (to call CANCEL on the long-running operation returned)
models.evaluations	Get a model evaluation	aiplatform.modelEvaluations.get (permission needed on the name resource)
models.evaluations	List a model evaluation	aiplatform.modelEvaluations.list (permission needed on the parent resource)
models.evaluations.slices	Get a model evaluations slice	aiplatform.modelEvaluationSlices.get (permission needed on the name resource)
models.evaluations.slices	List a model evaluations slice	aiplatform.modelEvaluationSlices.list (permission needed on the parent resource)
pipelineJobs	Cancel a pipelineJob	aiplatform.pipelineJobs.cancel (permission needed on the name resource)
pipelineJobs	Create a pipelineJob	aiplatform.pipelineJobs.create (permission needed on the parent resource)
pipelineJobs	Delete a pipelineJob ^† ^† Starts a long-running operation	aiplatform.pipelineJobs.delete (permission needed on the name resource) Other permissions: aiplatform.pipelinejobs.get (to call GET on the long-running operation returned) aiplatform.pipelinejobs.get (to call DELETE on the long-running operation returned)
pipelineJobs	Get a pipelineJob	aiplatform.pipelineJobs.get (permission needed on the name resource)
pipelineJobs	List a pipelineJob	aiplatform.pipelineJobs.list (permission needed on the parent resource)
specialistPools	Create a specialistPool ^† ^† Starts a long-running operation	aiplatform.specialistPools.create (permission needed on the parent resource) Other permissions: aiplatform.specialistPools.get (to call GET on the long-running operation returned) aiplatform.specialistPools.update (to call DELETE on the long-running operation returned) aiplatform.specialistPools.get (to call WAIT on the long-running operation returned) aiplatform.specialistPools.update (to call CANCEL on the long-running operation returned)
specialistPools	Delete a specialistPool ^† ^† Starts a long-running operation	aiplatform.specialistPools.delete (permission needed on the name resource) Other permissions: aiplatform.specialistPools.get (to call GET on the long-running operation returned) aiplatform.specialistPools.update (to call DELETE on the long-running operation returned) aiplatform.specialistPools.get (to call WAIT on the long-running operation returned) aiplatform.specialistPools.delete (to call CANCEL on the long-running operation returned)
specialistPools	Get a specialistPool	aiplatform.specialistPools.get (permission needed on the name resource)
specialistPools	List a specialistPool	aiplatform.specialistPools.list (permission needed on the parent resource)
specialistPools	Update a specialistPool ^† ^† Starts a long-running operation	aiplatform.specialistPools.update (permission needed on the name resource) Other permissions: aiplatform.specialistPools.get (to call GET on the long-running operation returned) aiplatform.specialistPools.update (to call DELETE on the long-running operation returned) aiplatform.specialistPools.get (to call WAIT on the long-running operation returned) aiplatform.specialistPools.update (to call CANCEL on the long-running operation returned)
studies	Creates a Study.	aiplatform.studies.create (permission needed on the parent resource)
studies	Deletes a Study.	aiplatform.studies.delete (permission needed on the name resource)
studies	Gets a Study by name.	aiplatform.studies.get (permission needed on the name resource)
studies	Lists all the studies in a region for an associated project.	aiplatform.studies.list (permission needed on the parent resource)
studies	Looks a study up using the user-defined displayName field instead of the fully qualified resource name.	aiplatform.studies.list (permission needed on the parent resource)
studies.trials	Adds a measurement of the objective metrics to a Trial.	aiplatform.trials.update (permission needed on the trialName resource)
studies.trials	Checks whether a Trial should stop or not. ^† ^† Starts a long-running operation	aiplatform.trials.get (permission needed on the trialName resource) Other permissions: aiplatform.trials.get (to call GET on the long-running operation returned) aiplatform.trials.update (to call DELETE on the long-running operation returned) aiplatform.trials.get (to call WAIT on the long-running operation returned) aiplatform.trials.update (to call CANCEL on the long-running operation returned)
studies.trials	Marks a Trial as complete.	aiplatform.trials.update (permission needed on the name resource)
studies.trials	Adds a user provided Trial to a Study.	aiplatform.trials.create (permission needed on the parent resource)
studies.trials	Deletes a Trial.	aiplatform.trials.delete (permission needed on the name resource)
studies.trials	Gets a Trial.	aiplatform.trials.get (permission needed on the name resource)
studies.trials	Lists the Trials associated with a Study.	aiplatform.trials.list (permission needed on the parent resource)
studies.trials	Lists the pareto-optimal Trials for multi-objective Study or the optimal Trials for single-objective Study.	aiplatform.trials.list (permission needed on the parent resource)
studies.trials	Stops a Trial.	aiplatform.trials.update (permission needed on the name resource)
studies.trials	Adds one or more Trials to a Study, with parameter values suggested by Vertex AI Vizier. ^† ^† Starts a long-running operation	aiplatform.trials.create (permission needed on the parent resource) Other permissions: aiplatform.studies.get (to call GET on the long-running operation returned) aiplatform.studies.update (to call DELETE on the long-running operation returned) aiplatform.studies.get (to call WAIT on the long-running operation returned) aiplatform.studies.update (to call CANCEL on the long-running operation returned)
tensorboards	Creates a Tensorboard. ^† ^† Starts a long-running operation	aiplatform.tensorboards.create (permission needed on the parent resource) Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned) aiplatform.locations.get (to call WAIT on the long-running operation returned) aiplatform.locations.get (to call CANCEL on the long-running operation returned)
tensorboards	Deletes a Tensorboard. ^† ^† Starts a long-running operation	aiplatform.tensorboards.delete (permission needed on the name resource) Other permissions: aiplatform.tensorboardRuns.get (to call GET on the long-running operation returned) aiplatform.tensorboardRuns.update (to call DELETE on the long-running operation returned) aiplatform.tensorboardRuns.get (to call WAIT on the long-running operation returned) aiplatform.tensorboardRuns.delete (to call CANCEL on the long-running operation returned)
tensorboards	Gets a Tensorboard.	aiplatform.tensorboards.get (permission needed on the name resource)
tensorboards	Lists Tensorboards in a Location.	aiplatform.tensorboards.list (permission needed on the parent resource)
tensorboards	Updates a Tensorboard. ^† ^† Starts a long-running operation	aiplatform.tensorboards.update (permission needed on the name resource) Other permissions: aiplatform.tensorboards.get (to call GET on the long-running operation returned) aiplatform.tensorboards.update (to call DELETE on the long-running operation returned) aiplatform.tensorboards.get (to call WAIT on the long-running operation returned) aiplatform.tensorboards.update (to call CANCEL on the long-running operation returned)
tensorboards.experiments	Creates a TensorboardExperiment.	aiplatform.tensorboardExperiments.create (permission needed on the parent resource)
tensorboards.experiments	Deletes a TensorboardExperiment. ^† ^† Starts a long-running operation	aiplatform.tensorboardExperiments.delete (permission needed on the name resource) Other permissions: aiplatform.tensorboardExperiments.get (to call GET on the long-running operation returned) aiplatform.tensorboardExperiments.update (to call DELETE on the long-running operation returned) aiplatform.tensorboardExperiments.get (to call WAIT on the long-running operation returned) aiplatform.tensorboardExperiments.delete (to call CANCEL on the long-running operation returned)
tensorboards.experiments	Gets a TensorboardExperiment.	aiplatform.tensorboardExperiments.get (permission needed on the name resource)
tensorboards.experiments	Lists TensorboardExperiments in a Location	aiplatform.tensorboardExperiments.list (permission needed on the parent resource)
tensorboards.experiments	Updates a TensorboardExperiment.	aiplatform.tensorboardExperiments.update (permission needed on the name resource)
tensorboards.experiments	Write time series data points of multiple TensorboardTimeSeries in multiple TensorboardRun's.	aiplatform.tensorboardExperiments.write (permission needed on the tensorboardExperiment resource)
tensorboards.experiments.runs	Batch create TensorboardRuns.	aiplatform.tensorboardRuns.batchCreate (permission needed on the parent resource)
tensorboards.experiments.runs	Creates a TensorboardRun.	aiplatform.tensorboardRuns.create (permission needed on the parent resource)
tensorboards.experiments.runs	Deletes a TensorboardRun. ^† ^† Starts a long-running operation	aiplatform.tensorboardRuns.delete (permission needed on the name resource) Other permissions: aiplatform.tensorboardRuns.get (to call GET on the long-running operation returned) aiplatform.tensorboardRuns.update (to call DELETE on the long-running operation returned) aiplatform.tensorboardRuns.get (to call WAIT on the long-running operation returned) aiplatform.tensorboardRuns.delete (to call CANCEL on the long-running operation returned)
tensorboards.experiments.runs	Gets a TensorboardRun.	aiplatform.tensorboardRuns.get (permission needed on the name resource)
tensorboards.experiments.runs	Lists TensorboardRuns in a Location.	aiplatform.tensorboardRuns.list (permission needed on the parent resource)
tensorboards.experiments.runs	Updates a TensorboardRun.	aiplatform.tensorboardRuns.update (permission needed on the name resource)
tensorboards.experiments.runs	Write time series data points into multiple TensorboardTimeSeries under a TensorboardRun.	aiplatform.tensorboardRuns.write (permission needed on the tensorboardRun resource)
tensorboards.experiments.runs.timeSeries	Batch create TensorboardTimeSeries that belong to a TensorboardExperiment.	aiplatform.tensorboardTimeSeries.batchCreate (permission needed on the parent resource)
tensorboards.experiments.runs.timeSeries	Reads multiple TensorboardTimeSeries' data.	aiplatform.tensorboardTimeSeries.batchRead (permission needed on the tensorboard resource)
tensorboards.experiments.runs.timeSeries	Creates a TensorboardTimeSeries.	aiplatform.tensorboardTimeSeries.create (permission needed on the parent resource)
tensorboards.experiments.runs.timeSeries	Deletes a TensorboardTimeSeries. ^† ^† Starts a long-running operation	aiplatform.tensorboardTimeSeries.delete (permission needed on the name resource) Other permissions: aiplatform.tensorboardRuns.get (to call GET on the long-running operation returned) aiplatform.tensorboardRuns.update (to call DELETE on the long-running operation returned)
tensorboards.experiments.runs.timeSeries	Exports a TensorboardTimeSeries' data.	aiplatform.tensorboardTimeSeries.read (permission needed on the tensorboardTimeSeries resource)
tensorboards.experiments.runs.timeSeries	Gets a TensorboardTimeSeries.	aiplatform.tensorboardTimeSeries.get (permission needed on the name resource)
tensorboards.experiments.runs.timeSeries	Lists TensorboardTimeSeries in a Location.	aiplatform.tensorboardTimeSeries.list (permission needed on the parent resource)
tensorboards.experiments.runs.timeSeries	Updates a TensorboardTimeSeries.	aiplatform.tensorboardTimeSeries.update (permission needed on the name resource)
tensorboards.experiments.runs.timeSeries	Reads a TensorboardTimeSeries' data.	aiplatform.tensorboardTimeSeries.read (permission needed on the tensorboardTimeSeries resource)
tensorboards.experiments.runs.timeSeries	Gets bytes of TensorboardBlobs.	aiplatform.tensorboardTimeSeries.read (permission needed on the timeSeries resource)
trainingPipelines	Cancel a trainingPipeline	aiplatform.trainingPipelines.cancel (permission needed on the name resource)
trainingPipelines	Create a trainingPipeline	aiplatform.trainingPipelines.create (permission needed on the parent resource)
trainingPipelines	Delete a trainingPipeline ^† ^† Starts a long-running operation	aiplatform.trainingPipelines.delete (permission needed on the name resource) Other permissions: aiplatform.trainingPipelines.get (to call GET on the long-running operation returned) aiplatform.trainingPipelines.get (to call DELETE on the long-running operation returned) aiplatform.trainingPipelines.get (to call WAIT on the long-running operation returned) aiplatform.trainingPipelines.delete (to call CANCEL on the long-running operation returned)
trainingPipelines	Get a trainingPipeline	aiplatform.trainingPipelines.get (permission needed on the name resource)
trainingPipelines	List a trainingPipeline	aiplatform.trainingPipelines.list (permission needed on the parent resource)
N/A	Generic delete operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned) aiplatform.locations.get (to call WAIT on the long-running operation returned) aiplatform.locations.get (to call CANCEL on the long-running operation returned)
datasets	Delete data item operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
featurestores	Import features operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned) aiplatform.featurestores.update (to call DELETE on the long-running operation returned) aiplatform.featurestores.get (to call WAIT on the long-running operation returned) aiplatform.featurestores.importFeatures (to call CANCEL on the long-running operation returned)
datasets	Delete annotation operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
datasets	Batch delete DataItems operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
datasets	Generate stats operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
datasets	Delete AnnotationSpec operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
hyperparameterTuningJobs	Delete HP tuning job ^† ^† Starts a long-running operation	Other permissions: aiplatform.hyperparameterTuningJobs.get (to call GET on the long-running operation returned) aiplatform.hyperparameterTuningJobs.get (to call DELETE on the long-running operation returned) aiplatform.hyperparameterTuningJobs.get (to call WAIT on the long-running operation returned) aiplatform.hyperparameterTuningJobs.delete (to call CANCEL on the long-running operation returned)
nasJobs	Delete NAS job ^† ^† Starts a long-running operation	Other permissions: aiplatform.nasJobs.get (to call GET on the long-running operation returned) aiplatform.nasJobs.get (to call DELETE on the long-running operation returned) aiplatform.nasJobs.get (to call WAIT on the long-running operation returned) aiplatform.nasJobs.delete (to call CANCEL on the long-running operation returned)
N/A	Create HumanInTheLoop operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned) aiplatform.locations.get (to call WAIT on the long-running operation returned) aiplatform.locations.get (to call CANCEL on the long-running operation returned)
featurestores	Export features operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.featurestores.get (to call GET on the long-running operation returned)
N/A	Delete HumanInTheLoop operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned)
N/A	Send HumanInTheLoop entry operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned) aiplatform.humanInTheLoops.send (to call CANCEL on the long-running operation returned)
datasets	Calculate data item label stats ^† ^† Starts a long-running operation	Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
N/A	Migrate resources operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.locations.get (to call GET on the long-running operation returned) aiplatform.locations.get (to call DELETE on the long-running operation returned)
datasets	Create DataItem operation ^† ^† Starts a long-running operation	Other permissions: aiplatform.datasets.get (to call GET on the long-running operation returned) aiplatform.datasets.update (to call DELETE on the long-running operation returned) aiplatform.datasets.get (to call WAIT on the long-running operation returned) aiplatform.datasets.update (to call CANCEL on the long-running operation returned)
N/A	^† ^† Starts a long-running operation

What's next

• For information about Vertex AI predefined, basic and custom roles, as well as general information about service accounts and agents, see Access control.
• For detailed information about controlling permissions with a custom service account, see Using a custom service account.
• Learn more about using IAM to access resources in the Granting, changing, and revoking access to resources topic of the IAM documentation.