question about IAM Dialogflow API Client role

[sarverein]

Hello, Can anyone help me please? I received the following message: 

In Dialogflow, the IAM Viewer role currently allows users of the console simulator to test agent conversations and to call the API's detectIntent/streamingDetectIntent methods. Starting January 31, 2023, Google will remove this permission from this role. Therefore these actions will require the ‘dialogflow.sessions.detectIntent' or ‘dialogflow.sessions.streamingDetectIntent' permission, which is included in roles such as the IAM Dialogflow API Client role. 

Who can tell what to do, where, and how? 

Thanks in advance, Anton

[ricconoel]

Hi,

I assume your project uses higher-privileged generic roles (Editor or Owner) also confer Viewer privileges. Users who uses these roles may lose access to the simulator UI on Jan 31st.

What you need to do is to add the DialogFlow API Client role or  Dialogflow API Admin role (depending how privileged your users are) to access the console. 

[sarverein]

Hello! Thank you very much for your answer. 

I have in IAM Dialogflow API Client role а "dialogflow.sessions.detectIntent". But I did not find this role: "dialogflow.sessions.streamingDetectIntent". Does this mean that if I do not change or add anything, then by default this role will remain: "dialogflow.sessions.detectIntent"?

Best regards, Anton

[ricconoel]

Hi,

Role dialogflow.sessions.streamingDetectIntent should be included in Dialogflow API Client since it has permissions for dialogflow.sessions.*

[varun-maraka]

You said "Users who uses these roles "  you used plural.
So does that mean even (Editor or Owner) roles are going away?

According to email from Google only
‘dialogflow.sessions.detectIntent' or ‘dialogflow.sessions.streamingDetectIntent'
permissions from "Viewer" role are removed.
Please confirm

[Unslave]

Hello,

Our account on Dialogflow also received the  same letter recently; After spending many hours on this letter and searching on the web, we also do not know what we should do about our projects on this issue; Our account is using the Essential Version;

Hi Varun, did you fix the above issue? If not, we should demand Dialogflow team to provide good answer to our Q here;

[varun-maraka]

Hi Unslave,

ricconoel
He did answer the question, but it was adding more confusion. That's why I asked followup question to be clear.

My understanding is If any of our account has "Viewer" access we need to change it to "Dialogflow API Client". I am not 100% sure

[Unslave]

Hello All,

#Now, we got correct understanding of the meaning of this name "console simulator" mentioned below, and the following is from the letter sent to us by Dialogflow Team in Dec/2022;
****************
In Dialogflow, the IAM Viewer role currently allows users of the
console simulator to test agent conversations and to call the API's
detectIntent/streamingDetectIntent methods.
******************

# Based on the above knowledge, we believe that the coming change mention in above letter will not disable our web app calling the APIs of the project in our account on Dialogflow platform;

[Unslave]

Hello Dialogflow Team,

The following is not clear to us; I hope that you can post more details on this point;
******************
What you need to do is to add the DialogFlow API Client role or Dialogflow API Admin role
to access the console.
**********************

Thank you!