AI Platform Data Labeling Service roles and permissions

This page lists the IAM roles and permissions for AI Platform Data Labeling Service. To search through all roles and permissions, see the role and permission index.

AI Platform Data Labeling Service roles

Role Permissions

Role	Permissions
Data Labeling Service Admin ^Beta (`roles/datalabeling.admin`) Full access to all Data Labeling resources	`datalabeling.*` `datalabeling.annotateddatasets.delete` `datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.label` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.create` `datalabeling.annotationspecsets.delete` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.create` `datalabeling.datasets.delete` `datalabeling.datasets.export` `datalabeling.datasets.get` `datalabeling.datasets.import` `datalabeling.datasets.list` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.create` `datalabeling.instructions.delete` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.cancel` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Data Labeling Service Editor ^Beta (`roles/datalabeling.editor`) Editor of all Data Labeling resources	`datalabeling.*` `datalabeling.annotateddatasets.delete` `datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.label` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.create` `datalabeling.annotationspecsets.delete` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.create` `datalabeling.datasets.delete` `datalabeling.datasets.export` `datalabeling.datasets.get` `datalabeling.datasets.import` `datalabeling.datasets.list` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.create` `datalabeling.instructions.delete` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.cancel` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`
Data Labeling Service Viewer ^Beta (`roles/datalabeling.viewer`) Viewer of all Data Labeling resources	`datalabeling.annotateddatasets.get` `datalabeling.annotateddatasets.list` `datalabeling.annotationspecsets.get` `datalabeling.annotationspecsets.list` `datalabeling.dataitems.` `datalabeling.dataitems.get` `datalabeling.dataitems.list` `datalabeling.datasets.get` `datalabeling.datasets.list` `datalabeling.examples.` `datalabeling.examples.get` `datalabeling.examples.list` `datalabeling.instructions.get` `datalabeling.instructions.list` `datalabeling.operations.get` `datalabeling.operations.list` `resourcemanager.projects.get` `resourcemanager.projects.list`

Data Labeling Service Admin ^Beta

(roles/datalabeling.admin)

Full access to all Data Labeling resources

datalabeling.*

datalabeling.annotateddatasets.delete
datalabeling.annotateddatasets.get
datalabeling.annotateddatasets.label
datalabeling.annotateddatasets.list
datalabeling.annotationspecsets.create
datalabeling.annotationspecsets.delete
datalabeling.annotationspecsets.get
datalabeling.annotationspecsets.list
datalabeling.dataitems.get
datalabeling.dataitems.list
datalabeling.datasets.create
datalabeling.datasets.delete
datalabeling.datasets.export
datalabeling.datasets.get
datalabeling.datasets.import
datalabeling.datasets.list
datalabeling.examples.get
datalabeling.examples.list
datalabeling.instructions.create
datalabeling.instructions.delete
datalabeling.instructions.get
datalabeling.instructions.list
datalabeling.operations.cancel
datalabeling.operations.get
datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Data Labeling Service Editor ^Beta

(roles/datalabeling.editor)

Editor of all Data Labeling resources

datalabeling.*

datalabeling.annotateddatasets.delete
datalabeling.annotateddatasets.get
datalabeling.annotateddatasets.label
datalabeling.annotateddatasets.list
datalabeling.annotationspecsets.create
datalabeling.annotationspecsets.delete
datalabeling.annotationspecsets.get
datalabeling.annotationspecsets.list
datalabeling.dataitems.get
datalabeling.dataitems.list
datalabeling.datasets.create
datalabeling.datasets.delete
datalabeling.datasets.export
datalabeling.datasets.get
datalabeling.datasets.import
datalabeling.datasets.list
datalabeling.examples.get
datalabeling.examples.list
datalabeling.instructions.create
datalabeling.instructions.delete
datalabeling.instructions.get
datalabeling.instructions.list
datalabeling.operations.cancel
datalabeling.operations.get
datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Data Labeling Service Viewer ^Beta

(roles/datalabeling.viewer)

Viewer of all Data Labeling resources

datalabeling.annotateddatasets.get

datalabeling.annotateddatasets.list

datalabeling.annotationspecsets.get

datalabeling.annotationspecsets.list

datalabeling.dataitems.*

datalabeling.dataitems.get
datalabeling.dataitems.list

datalabeling.datasets.get

datalabeling.datasets.list

datalabeling.examples.*

datalabeling.examples.get
datalabeling.examples.list

datalabeling.instructions.get

datalabeling.instructions.list

datalabeling.operations.get

datalabeling.operations.list

resourcemanager.projects.get

resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role Permissions

Role	Permissions
Data Labeling Service Agent (`roles/datalabeling.serviceAgent`) Gives Data Labeling service account read/write access to Cloud Storage, read/write BigQuery, update CMLE model versions, editor access to Annotation service and AutoML service. Warning: Do not grant service agent roles to any principals except service agents.	`automl.annotationSpecs.` `automl.annotationSpecs.create` `automl.annotationSpecs.delete` `automl.annotationSpecs.get` `automl.annotationSpecs.list` `automl.annotationSpecs.update` `automl.annotations.` `automl.annotations.approve` `automl.annotations.create` `automl.annotations.list` `automl.annotations.manipulate` `automl.annotations.reject` `automl.columnSpecs.` `automl.columnSpecs.get` `automl.columnSpecs.list` `automl.columnSpecs.update` `automl.datasets.create` `automl.datasets.delete` `automl.datasets.export` `automl.datasets.get` `automl.datasets.import` `automl.datasets.list` `automl.datasets.update` `automl.examples.` `automl.examples.delete` `automl.examples.get` `automl.examples.list` `automl.examples.update` `automl.files.` `automl.files.delete` `automl.files.list` `automl.humanAnnotationTasks.` `automl.humanAnnotationTasks.create` `automl.humanAnnotationTasks.delete` `automl.humanAnnotationTasks.get` `automl.humanAnnotationTasks.list` `automl.locations.get` `automl.locations.list` `automl.modelEvaluations.` `automl.modelEvaluations.create` `automl.modelEvaluations.get` `automl.modelEvaluations.list` `automl.models.create` `automl.models.delete` `automl.models.deploy` `automl.models.export` `automl.models.get` `automl.models.list` `automl.models.predict` `automl.models.undeploy` `automl.operations.` `automl.operations.cancel` `automl.operations.delete` `automl.operations.get` `automl.operations.list` `automl.tableSpecs.` `automl.tableSpecs.get` `automl.tableSpecs.list` `automl.tableSpecs.update` `bigquery.datasets.create` `bigquery.datasets.get` `bigquery.jobs.create` `bigquery.jobs.get` `bigquery.tables.create` `bigquery.tables.get` `bigquery.tables.getData` `ml.jobs.create` `ml.jobs.get` `ml.jobs.getIamPolicy` `ml.jobs.list` `ml.locations.` `ml.locations.get` `ml.locations.list` `ml.models.` `ml.models.create` `ml.models.delete` `ml.models.get` `ml.models.getIamPolicy` `ml.models.list` `ml.models.predict` `ml.models.setIamPolicy` `ml.models.update` `ml.operations.get` `ml.operations.list` `ml.projects.getConfig` `ml.studies.` `ml.studies.create` `ml.studies.delete` `ml.studies.get` `ml.studies.getIamPolicy` `ml.studies.list` `ml.studies.setIamPolicy` `ml.trials.` `ml.trials.create` `ml.trials.delete` `ml.trials.get` `ml.trials.list` `ml.trials.update` `ml.versions.` `ml.versions.create` `ml.versions.delete` `ml.versions.get` `ml.versions.list` `ml.versions.predict` `ml.versions.update` `resourcemanager.projects.get` `resourcemanager.projects.list` `serviceusage.consumerpolicy.analyze` `serviceusage.consumerpolicy.get` `serviceusage.effectivepolicy.get` `serviceusage.groups.*` `serviceusage.groups.list` `serviceusage.groups.listExpandedMembers` `serviceusage.groups.listMembers` `serviceusage.services.get` `serviceusage.services.list` `serviceusage.values.test` `storage.objects.create` `storage.objects.delete` `storage.objects.get` `storage.objects.list` `storage.objects.update`

Data Labeling Service Agent

(roles/datalabeling.serviceAgent)

Gives Data Labeling service account read/write access to Cloud Storage, read/write BigQuery, update CMLE model versions, editor access to Annotation service and AutoML service.

automl.annotationSpecs.*

automl.annotationSpecs.create
automl.annotationSpecs.delete
automl.annotationSpecs.get
automl.annotationSpecs.list
automl.annotationSpecs.update

automl.annotations.*

automl.annotations.approve
automl.annotations.create
automl.annotations.list
automl.annotations.manipulate
automl.annotations.reject

automl.columnSpecs.*

automl.columnSpecs.get
automl.columnSpecs.list
automl.columnSpecs.update

automl.datasets.create

automl.datasets.delete

automl.datasets.export

automl.datasets.get

automl.datasets.import

automl.datasets.list

automl.datasets.update

automl.examples.*

automl.examples.delete
automl.examples.get
automl.examples.list
automl.examples.update

automl.files.*

automl.files.delete
automl.files.list

automl.humanAnnotationTasks.*

automl.humanAnnotationTasks.create
automl.humanAnnotationTasks.delete
automl.humanAnnotationTasks.get
automl.humanAnnotationTasks.list

automl.locations.get

automl.locations.list

automl.modelEvaluations.*

automl.modelEvaluations.create
automl.modelEvaluations.get
automl.modelEvaluations.list

automl.models.create

automl.models.delete

automl.models.deploy

automl.models.export

automl.models.get

automl.models.list

automl.models.predict

automl.models.undeploy

automl.operations.*

automl.operations.cancel
automl.operations.delete
automl.operations.get
automl.operations.list

automl.tableSpecs.*

automl.tableSpecs.get
automl.tableSpecs.list
automl.tableSpecs.update

bigquery.datasets.create

bigquery.datasets.get

bigquery.jobs.create

bigquery.jobs.get

bigquery.tables.create

bigquery.tables.get

bigquery.tables.getData

ml.jobs.create

ml.jobs.get

ml.jobs.getIamPolicy

ml.jobs.list

ml.locations.*

ml.locations.get
ml.locations.list

ml.models.*

ml.models.create
ml.models.delete
ml.models.get
ml.models.getIamPolicy
ml.models.list
ml.models.predict
ml.models.setIamPolicy
ml.models.update

ml.operations.get

ml.operations.list

ml.projects.getConfig

ml.studies.*

ml.studies.create
ml.studies.delete
ml.studies.get
ml.studies.getIamPolicy
ml.studies.list
ml.studies.setIamPolicy

ml.trials.*

ml.trials.create
ml.trials.delete
ml.trials.get
ml.trials.list
ml.trials.update

ml.versions.*

ml.versions.create
ml.versions.delete
ml.versions.get
ml.versions.list
ml.versions.predict
ml.versions.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.consumerpolicy.analyze

serviceusage.consumerpolicy.get

serviceusage.effectivepolicy.get

serviceusage.groups.*

serviceusage.groups.list
serviceusage.groups.listExpandedMembers
serviceusage.groups.listMembers

serviceusage.services.get

serviceusage.services.list

serviceusage.values.test

storage.objects.create

storage.objects.delete

storage.objects.get

storage.objects.list

storage.objects.update

AI Platform Data Labeling Service permissions

Permission	Included in roles
`datalabeling.annotateddatasets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotateddatasets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.annotateddatasets.label`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Support User (`roles/iam.supportUser`)
`datalabeling.annotateddatasets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`datalabeling.annotationspecsets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotationspecsets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.annotationspecsets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`)
`datalabeling.annotationspecsets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`datalabeling.dataitems.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.dataitems.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.export`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`) Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`) Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.import`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.datasets.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`)
`datalabeling.examples.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`)
`datalabeling.examples.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`datalabeling.instructions.create`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.instructions.delete`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.instructions.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`)
`datalabeling.instructions.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`)
`datalabeling.operations.cancel`	Owner (`roles/owner`) Editor (`roles/editor`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`)
`datalabeling.operations.get`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Vertex AI Service Agent (`roles/aiplatform.serviceAgent`) Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)
`datalabeling.operations.list`	Owner (`roles/owner`) Editor (`roles/editor`) Viewer (`roles/viewer`) Data Labeling Service Admin (`roles/datalabeling.admin`) Data Labeling Service Editor (`roles/datalabeling.editor`) Data Labeling Service Viewer (`roles/datalabeling.viewer`) Security Admin (`roles/iam.securityAdmin`) Security Reviewer (`roles/iam.securityReviewer`) Security Auditor (`roles/iam.securityAuditor`) Support User (`roles/iam.supportUser`) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Contact Center AI Insights Service Agent (`roles/contactcenterinsights.serviceAgent`)

AI Platform Data Labeling Service roles and permissions