Agent Permission Report

    To generate these reports, navigate to Reports > Gemini Enterprise Agent Platform > Agent Permission Report.

    The following reports are available in this category: All Agent Identities, All Service Accounts, Agent IAM Roles, and Agent Deny Policies.

    All Agent Identities

    This report lists the identities that your Gemini Enterprise Agent Platform agents run as. Use this report to see which identity sits behind each Gemini agent, since that identity carries the agent's access.

    How it works

    The report returns the identities associated with the Gemini Enterprise Agent Platform agents discovered on the selected instances.

    How to generate the report

    1. Navigate to Reports, then select Gemini Enterprise Agent Platform.
    2. Under Agent Permission Report, click All Agent Identities.
    3. In Select Instance, select the instances whose agent identities you want to see.
    4. Click Apply.

    All Service Accounts

    This report lists the service accounts used by your Gemini Enterprise Agent Platform agents. Use this report to review the service accounts in play and to spot accounts shared across several Gemini agents.

    How it works

    The report returns the service accounts associated with the Gemini Enterprise Agent Platform agents discovered on the selected instances.

    How to generate the report

    1. Navigate to Reports, then select Gemini Enterprise Agent Platform.
    2. Under Agent Permission Report, click All Service Accounts.
    3. In Select Instance, select the instances whose service accounts you want to see.
    4. Click Apply.

    Agent IAM Roles

    This report lists the IAM roles granted to your Gemini Enterprise Agent Platform agent identities. Use this report to see exactly what each Gemini agent is permitted to do and to find roles that grant more access than the agent needs.

    How it works

    The report returns the IAM roles held by the identities of the Gemini Enterprise Agent Platform agents discovered on the selected instances.

    How to generate the report

    1. Navigate to Reports, then select Gemini Enterprise Agent Platform.
    2. Under Agent Permission Report, click Agent IAM Roles.
    3. In Select Instance, select the instances whose agent roles you want to see.
    4. Click Apply.

    Agent Deny Policies

    This report lists the deny policies that apply to your Gemini Enterprise Agent Platform agent identities. Use this report to confirm which actions are explicitly denied to a Gemini agent, regardless of the roles it holds.

    How it works

    The report returns the deny policies that apply to the identities of the Gemini Enterprise Agent Platform agents discovered on the selected instances.

    How to generate the report

    1. Navigate to Reports, then select Gemini Enterprise Agent Platform.
    2. Under Agent Permission Report, click Agent Deny Policies.
    3. In Select Instance, select the instances whose deny policies you want to see.
    4. Click Apply.