Google ADK - IAM Examples

Google ADK - IAM Examples

Roles

• Vertex AI: roles/aiplatform.user
• Cloud Run: roles/run.invoker (runtime), roles/run.admin (deploy)
• Secret Manager: roles/secretmanager.secretAccessor
• Logging/Monitoring: roles/logging.logWriter, roles/monitoring.metricWriter

gcloud Example

gcloud projects add-iam-policy-binding $PROJECT_ID \
  --member="serviceAccount:adk-sa@$PROJECT_ID.iam.gserviceaccount.com" \
  --role="roles/aiplatform.user"