notebooks/ERR/2023_003

Vertex AI Workbench account has required permissions to create and use notebooks

Product: Vertex AI Workbench
Rule class: ERR - Something that is wrong

Description

Creating and using a notebook requires service-*@gcp-sa-notebooks.iam.gserviceaccount.com to have “AI Platform Notebooks Service Agent” role and for user to have “Service Account User” role

Remediation

  1. Add “AI Platform Notebooks Service Agent” Role to the Google-provided service account in the format of “service-%number%@gcp-sa-notebooks.iam.gserviceaccount.com”

  2. Add “Service Account User” Role to the user account creating, owning or using the notebook.

Further information