Flow roles and permissions

This page lists the IAM roles and permissions for Flow. To search through all roles and permissions, see the role and permission index.

Flow roles

Role	Permissions
Flow Admin ^Beta (roles/flow.admin) Full access to all Flow resources. Intended for project administrators.	resourcemanager.projects.get resourcemanager.projects.list
Flow Editor ^Beta (roles/flow.editor) Create and manage Flow generated media. Intended for content creators.	resourcemanager.projects.get resourcemanager.projects.list

Service agent roles

Service agent roles should only be granted to service agents.

Role	Permissions
FlowService Service Agent (roles/aisandbox.serviceAgent) Grants FlowService Service Agent permissions to manage resources in the consumer project. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.predict aiplatform.interactions.create aiplatform.interactions.get logging.logEntries.create logging.logEntries.route serviceusage.services.use
Flow Service Agent (roles/flow.serviceAgent) Grants Flow Service Agent permissions to manage resources in the consumer project. Warning: Do not grant service agent roles to any principals except service agents.	aiplatform.endpoints.predict aiplatform.interactions.create aiplatform.interactions.get logging.logEntries.create logging.logEntries.route serviceusage.services.use

Flow permissions

There are no IAM permissions for this service.