CODEWITHSUNDEEP
google-cloud-platform
Paul McGunnigle
Paul McGunnigle

Reputation: 13

IAM permission 'dialogflow.conversations.list' on 'projects' denied

I've created a custom role in GCP, which I'm using to assign limited access to our business users, enabling them to train the chatbot. At the moment they can perform the functions as needed using the Training module, I would also like to give access to the History module, but I keep hitting an error

IAM permission 'dialogflow.conversations.list' on 'projects' denied.

When I try and add this permission, it's not available. I've noticed the second I make a copy of a standard dialogflow permission group, this object goes missing.

Any suggestions on how I can enable access to this module?

Add Permissions Screenshot

Upvotes: 1

Views: 926

Answers (2)

Paul McGunnigle
Paul McGunnigle

Reputation: 13

That dialogflow.conversationManager role looks perfect, I'll switch to that.

Many thanks!

Upvotes: 0

SeungwooLee
SeungwooLee

Reputation: 969

According to Google document, Not all permissions can be used for custom IAM role.

Custom IAM role has a limitation that some permissions are not available.

Below is description about limitation of custom IAM from google document page.

Some predefined roles contain permissions that are not permitted in custom roles. To check whether you can use a specific permission in a custom role, see Support level for permissions in custom roles.

Also, I checked whether dialogflow.conversations.list permission is permitted or not. But It didn't even exist.

You can also check it here.

I think you can just grant a dialogflow.conversationManager role to group or users for your situation.

Upvotes: 1

Related Questions