AI Edge Portal roles and permissions

This page lists the IAM roles and permissions for AI Edge Portal. To search through all roles and permissions, see the role and permission index.

AI Edge Portal roles

AI Edge Portal offers the following service agent roles. Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
AI Edge Portal Service Agent (`roles/aiedgeportal.serviceAgent`) Grants AI Edge Portal Service Agent permissions required to read/write data to GCS buckets Warning: Do not grant service agent roles to any principals except service agents.	`storage.buckets.create` `storage.buckets.get` `storage.buckets.list` `storage.objects.create` `storage.objects.delete` `storage.objects.get`

(roles/aiedgeportal.serviceAgent)

Grants AI Edge Portal Service Agent permissions required to read/write data to GCS buckets

storage.buckets.create

storage.buckets.get

storage.buckets.list

storage.objects.create

storage.objects.delete

storage.objects.get

There are no IAM permissions for this service.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-08-26 UTC.