Gemini API roles and permissions

This page lists the IAM roles and permissions for Gemini API. To search through all roles and permissions, see the role and permission index.

Gemini API roles

Gemini API offers the following service agent roles. Service agent roles should only be granted to service agents.

Role Permissions

Generative Language Service Agent

(roles/generativelanguage.serviceAgent)

Grants Generative Language Service Agent permissions required to read data from GCS buckets.

storage.buckets.get

storage.objects.get

Gemini API permissions

There are no IAM permissions for this service.

Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026年08月28日 UTC.