Need help with IAM on discoveryengine: 7 PERMISSION_DENIED: The caller does not have permission

Google Cloud Build with AI Custom ML & MLOps
1

Hi there I am trying to create a DataStore and I am using this code:

https://cloud.google.com/generative-ai-app-builder/docs/reference/rpc/google.cloud.discoveryengine.v1alpha#google.cloud.discoveryengine.v1alpha.CreateDataStoreRequest

Althouth, I got this error: 7 PERMISSION_DENIED: The caller does not have permission

Below is my IAM config, whats else shoud I do?

edudesouza_0-1700832837746.png
edudesouza_0-1700832837746.png1280Ă—855 103 KB

2

Hi @edudesouza ,

Welcome to the Google Cloud Community!

What programming language are you using to call the method? Or are you using the gcloud CLI?

Based on this documentation, the IAM Permission needed for this method is discoveryengine.dataStores.create, which is part of the Discovery Engine Admin role that you already have.

You may also view this Stack Overflow thread that has a similar issue to yours.

If the above options don’t work, you can contact Google Cloud Support to further look into your case. Thank you! :smiley:

3

Hi @lawrencenelson I guess it is some API issue, calling the endpoit direct using curl it responds correctly.

4

Hi fellows, found my problem, I have a Caloud Function that has 2 firebase configs.

Example:
const discoveryengineClient = new ConversationalSearchServiceClient({keyFilename: “./myfile1.json”});

1 Like