Sharing

Many team members can collaborate on an agent, and the level of access granted to each team member can be controlled. You can manage access using either the Dialogflow console or the GCP console.

Roles

Permissions are managed by GCP IAM, and a subset of IAM roles have corresponding Dialogflow console roles:

Dialogflow console role IAM role Description
Admin Project > Owner Full access to all Dialogflow (console and API) and GCP resources. Can use console to create agent.
Developer Project > Editor Edit access to all Dialogflow (console and API) and GCP resources. Can use console to create agent.
Reviewer Project > Viewer Read access to all Dialogflow (console and API) and GCP resources. Cannot detect intent.
N/A Project > Browser Access to browse GCP resources.
N/A Dialogflow > Dialogflow API Admin Full access to Dialogflow (API only) resources.
N/A Dialogflow > Dialogflow API Client Client access to Dialogflow (API only) resources. This grants permission to detect intent and read/write session properties (contexts, session entity types, etc.).
N/A Dialogflow > Dialogflow API Reader Read access to Dialogflow (API only) resources. Cannot detect intent.

There are some situations in which you must use the GCP console:

  • Only the GCP console supports multiple admin roles.
  • If you have integrations with other GCP resources (for example, Cloud Functions), and you do not want to grant full GCP project access to all team members, you must grant Dialogflow API roles and other resource-specific roles using the GCP console. See Using GCP console to manage roles below.

Using Dialogflow console to manage roles

This section describes how to use the Dialogflow console to manage roles.

To access the agent's share settings:

  1. Open the Dialogflow console
  2. Select the agent you wish to manage
  3. Click the gear icon next to the agent name
  4. Click the Share tab

The agent share settings will look similar to:

Add user:

  1. Enter new user's email address
  2. Select a role
  3. Click Add
  4. Click Save

Change role:

  1. Find the user in the list
  2. Select a different role
  3. Click Save

Remove user:

  1. Find the user in the list
  2. Click × on the right
  3. Click Save

Using GCP console to manage roles

This section describes how to use the GCP console and IAM to manage roles. See the IAM quickstart for instructions on adding, editing, and removing roles.

Roles can apply to the entire GCP project or specific resources:

  • To grant access to the entire GCP project, select Project from the role list.
  • To grant access to just Dialogflow resources, select Dialogflow from the role list.
  • To grant access to a specific list of resources, add a role for each resource.

In brief:

  1. Open the GCP console IAM settings
  2. Select your GCP project
  3. Use the UI's add, edit, and remove controls to manage roles
  4. Hover over roles to see descriptions
  5. Save changes