google.ai.generativelanguage.Permission

Permission resource grants user, group or the rest of the world access to the PaLM API resource (e.g.

a tuned model, file).

A role is a collection of permitted operations that allows users to perform specific actions on PaLM API resources. To make them available to users, groups, or service accounts, you assign roles. When you assign a role, you grant permissions that the role contains.

There are three concentric roles. Each role is a superset of the previous role's permitted operations:

  • reader can use the resource (e.g. tuned model) for inference
  • writer has reader's permissions and additionally can edit and share
  • owner has writer's permissions and additionally can delete

name str

Output only. The permission name. A unique name will be generated on create. Example: tunedModels/{tuned_model}permssions/{permission} Output only.

grantee_type google.ai.generativelanguage.Permission.GranteeType

Required. Immutable. The type of the grantee.
email_address str

Optional. Immutable. The email address of the user of group which this permission refers. Field is not set when permission's grantee type is EVERYONE.
role google.ai.generativelanguage.Permission.Role

Required. The role granted by this permission.

Child Classes

class GranteeType

class Role