Recommendations roles and permissions

This page lists the IAM roles and permissions for Recommendations. To search through all roles and permissions, see the role and permission index.

Recommendations roles

Role Permissions

Recommendations AI Admin Beta

(roles/automlrecommendations.admin)

Full access to all Recommendations AI resources.

automlrecommendations.*

  • automlrecommendations.apiKeys.create
  • automlrecommendations.apiKeys.delete
  • automlrecommendations.apiKeys.list
  • automlrecommendations.catalogItems.create
  • automlrecommendations.catalogItems.delete
  • automlrecommendations.catalogItems.get
  • automlrecommendations.catalogItems.list
  • automlrecommendations.catalogItems.update
  • automlrecommendations.catalogs.getStats
  • automlrecommendations.catalogs.list
  • automlrecommendations.catalogs.update
  • automlrecommendations.eventStores.getStats
  • automlrecommendations.eventStores.list
  • automlrecommendations.events.create
  • automlrecommendations.events.get
  • automlrecommendations.events.list
  • automlrecommendations.events.purge
  • automlrecommendations.events.rejoin
  • automlrecommendations.placements.create
  • automlrecommendations.placements.delete
  • automlrecommendations.placements.getStats
  • automlrecommendations.placements.list
  • automlrecommendations.recommendations.create
  • automlrecommendations.recommendations.delete
  • automlrecommendations.recommendations.list
  • automlrecommendations.recommendations.pause
  • automlrecommendations.recommendations.resume
  • automlrecommendations.recommendations.update

resourcemanager.projects.get

resourcemanager.projects.list

retail.catalogs.list

retail.catalogs.update

retail.operations.*

  • retail.operations.get
  • retail.operations.list

retail.placements.*

  • retail.placements.predict
  • retail.placements.search

retail.products.create

retail.products.delete

retail.products.export

retail.products.get

retail.products.import

retail.products.list

retail.products.purge

retail.products.update

retail.retailProjects.*

  • retail.retailProjects.acceptDataTerms
  • retail.retailProjects.get

retail.userEvents.*

  • retail.userEvents.create
  • retail.userEvents.import
  • retail.userEvents.purge
  • retail.userEvents.rejoin

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Recommendations AI Editor Beta

(roles/automlrecommendations.editor)

Editor of all Recommendations AI resources.

automlrecommendations.apiKeys.create

automlrecommendations.apiKeys.list

automlrecommendations.catalogItems.*

  • automlrecommendations.catalogItems.create
  • automlrecommendations.catalogItems.delete
  • automlrecommendations.catalogItems.get
  • automlrecommendations.catalogItems.list
  • automlrecommendations.catalogItems.update

automlrecommendations.catalogs.getStats

automlrecommendations.catalogs.list

automlrecommendations.eventStores.*

  • automlrecommendations.eventStores.getStats
  • automlrecommendations.eventStores.list

automlrecommendations.events.create

automlrecommendations.events.get

automlrecommendations.events.list

automlrecommendations.placements.create

automlrecommendations.placements.getStats

automlrecommendations.placements.list

automlrecommendations.recommendations.create

automlrecommendations.recommendations.list

automlrecommendations.recommendations.pause

automlrecommendations.recommendations.resume

automlrecommendations.recommendations.update

resourcemanager.projects.get

resourcemanager.projects.list

retail.catalogs.list

retail.catalogs.update

retail.operations.*

  • retail.operations.get
  • retail.operations.list

retail.placements.*

  • retail.placements.predict
  • retail.placements.search

retail.products.create

retail.products.delete

retail.products.export

retail.products.get

retail.products.import

retail.products.list

retail.products.update

retail.retailProjects.get

retail.userEvents.create

retail.userEvents.import

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Recommendations AI Viewer Beta

(roles/automlrecommendations.viewer)

Viewer of all Recommendations resources except apiKeys. To view all resources, including apiKeys, grant the Recommendations AI Admin Viewer role (roles/automlrecommendations.adminViewer).

automlrecommendations.catalogItems.get

automlrecommendations.catalogItems.list

automlrecommendations.catalogs.getStats

automlrecommendations.catalogs.list

automlrecommendations.eventStores.*

  • automlrecommendations.eventStores.getStats
  • automlrecommendations.eventStores.list

automlrecommendations.events.get

automlrecommendations.events.list

automlrecommendations.placements.getStats

automlrecommendations.placements.list

automlrecommendations.recommendations.list

resourcemanager.projects.get

resourcemanager.projects.list

retail.catalogs.list

retail.operations.*

  • retail.operations.get
  • retail.operations.list

retail.placements.*

  • retail.placements.predict
  • retail.placements.search

retail.products.export

retail.products.get

retail.products.list

retail.retailProjects.get

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Recommendations AI Admin Viewer Beta

(roles/automlrecommendations.adminViewer)

Viewer of all Recommendations AI resources.

automlrecommendations.apiKeys.list

automlrecommendations.catalogItems.get

automlrecommendations.catalogItems.list

automlrecommendations.catalogs.getStats

automlrecommendations.catalogs.list

automlrecommendations.eventStores.*

  • automlrecommendations.eventStores.getStats
  • automlrecommendations.eventStores.list

automlrecommendations.events.get

automlrecommendations.events.list

automlrecommendations.placements.getStats

automlrecommendations.placements.list

automlrecommendations.recommendations.list

resourcemanager.projects.get

resourcemanager.projects.list

retail.catalogs.list

retail.operations.*

  • retail.operations.get
  • retail.operations.list

retail.placements.*

  • retail.placements.predict
  • retail.placements.search

retail.products.export

retail.products.get

retail.products.list

retail.retailProjects.get

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

  • serviceusage.groups.list
  • serviceusage.groups.listExpandedMembers
  • serviceusage.groups.listMembers

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Recommendations AI Service Agent

(roles/automlrecommendations.serviceAgent)

Recommendations AI service uploads catalog feeds from Cloud Storage, reports results to the customer Cloud Storage bucket, writes logs to customer projects, and writes and reads Stackdriver metrics for customer projects.

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.get

bigquery.jobs.list

bigquery.jobs.update

bigquery.tables.create

bigquery.tables.export

bigquery.tables.get

bigquery.tables.getData

bigquery.tables.list

bigquery.tables.update

bigquery.tables.updateData

cloudnotifications.activities.list

dataflow.jobs.*

  • dataflow.jobs.cancel
  • dataflow.jobs.create
  • dataflow.jobs.get
  • dataflow.jobs.list
  • dataflow.jobs.snapshot
  • dataflow.jobs.updateContents

dataflow.messages.list

dataflow.metrics.get

logging.logEntries.create

logging.logEntries.route

monitoring.alertPolicies.get

monitoring.alertPolicies.list

monitoring.alertPolicies.listEffectiveTags

monitoring.alertPolicies.listTagBindings

monitoring.alerts.*

  • monitoring.alerts.get
  • monitoring.alerts.list

monitoring.dashboards.get

monitoring.dashboards.list

monitoring.dashboards.listEffectiveTags

monitoring.dashboards.listTagBindings

monitoring.groups.get

monitoring.groups.list

monitoring.metricDescriptors.create

monitoring.metricDescriptors.get

monitoring.metricDescriptors.list

monitoring.monitoredResourceDescriptors.*

  • monitoring.monitoredResourceDescriptors.get
  • monitoring.monitoredResourceDescriptors.list

monitoring.notificationChannelDescriptors.*

  • monitoring.notificationChannelDescriptors.get
  • monitoring.notificationChannelDescriptors.list

monitoring.notificationChannels.get

monitoring.notificationChannels.list

monitoring.services.get

monitoring.services.list

monitoring.slos.get

monitoring.slos.list

monitoring.snoozes.get

monitoring.snoozes.list

monitoring.timeSeries.*

  • monitoring.timeSeries.create
  • monitoring.timeSeries.list

monitoring.uptimeCheckConfigs.get

monitoring.uptimeCheckConfigs.list

opsconfigmonitoring.resourceMetadata.list

resourcemanager.projects.get

resourcemanager.projects.list

stackdriver.projects.get

stackdriver.resourceMetadata.list

storage.buckets.create

storage.buckets.get

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

Recommendations permissions

Permission Included in roles

automlrecommendations.apiKeys.create

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.apiKeys.delete

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.apiKeys.list

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Security Auditor (roles/iam.securityAuditor)

automlrecommendations.catalogItems.create

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.catalogItems.delete

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.catalogItems.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.catalogItems.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.catalogItems.update

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.catalogs.getStats

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.catalogs.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.catalogs.update

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.eventStores.getStats

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.eventStores.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

automlrecommendations.events.create

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.events.get

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Support User (roles/iam.supportUser)

automlrecommendations.events.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.events.purge

Owner (roles/owner)

Recommendations AI Admin (roles/automlrecommendations.admin)

Retail Admin (roles/retail.admin)

automlrecommendations.events.rejoin

Owner (roles/owner)

Recommendations AI Admin (roles/automlrecommendations.admin)

Retail Admin (roles/retail.admin)

automlrecommendations.placements.create

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.placements.delete

Owner (roles/owner)

Recommendations AI Admin (roles/automlrecommendations.admin)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.placements.getStats

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.placements.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.recommendations.create

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.recommendations.delete

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.recommendations.list

Owner (roles/owner)

Editor (roles/editor)

Viewer (roles/viewer)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Recommendations AI Viewer (roles/automlrecommendations.viewer)

Security Admin (roles/iam.securityAdmin)

Security Reviewer (roles/iam.securityReviewer)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Retail Viewer (roles/retail.viewer)

Recommendations AI Admin Viewer (roles/automlrecommendations.adminViewer)

Security Auditor (roles/iam.securityAuditor)

Support User (roles/iam.supportUser)

Retail Merchant Approver (roles/retail.merchantApprover)

Retail Merchant Creator (roles/retail.merchantCreator)

automlrecommendations.recommendations.pause

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.recommendations.resume

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

automlrecommendations.recommendations.update

Owner (roles/owner)

Editor (roles/editor)

Recommendations AI Admin (roles/automlrecommendations.admin)

Recommendations AI Editor (roles/automlrecommendations.editor)

Retail Admin (roles/retail.admin)

Retail Editor (roles/retail.editor)

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026年08月28日 UTC.