FailedPrecondition: 400 Vertex AI Service Agent does not have permission to access Artifact Registry

[anonymous]

Hi,

I’m adhering to the instructions in this notebook for conducting my research. I’ve input my specific project details into “PROJECT_ID” and “BUCKET_URI,” while keeping the remaining fields at their default settings. However, upon attempting to execute the “Run Fine-tuning” process, I encountered the following error. I would greatly appreciate it if you could review this and provide guidance on resolving the issue. Thank you.

https://github.com/GoogleCloudPlatform/vertex-ai-samples/blob/main/notebooks/community/model_garden/model_garden_mediapipe_image_classification.ipynb

FailedPrecondition: 400 Vertex AI Service Agent [service-437267973293@gcp-sa-aiplatform-cc.iam.gserviceaccount.com](mailto:service-437267973293@gcp-sa-aiplatform-cc.iam.gserviceaccount.com) does not have permission to access Artifact Registry repository projects/vertex-ai-restricted/locations/us/repositories/vertex-vision-model-garden-dockers.

[rubenszmm]

In Google Console go to IAM (Identity and Access Management) / Roles. Create a new role with Artifact Registry permissions (writer, editor). After that, in IAM, attach this new role to the service account service 43726 …@…gserviceaccount.com being used by Vertex AI. That will solve the porblem.

[anonymous]

Hi Rubenszmm,

I appreciate your prompt reply. I followed the instructions you provided, however I still see the same error in the original description. Here’s my permission setting screenshot

[arnaldog12]

Take a look at this answer: https://stackoverflow.com/a/78624154/1512177