text-bison@001 IAM_PERMISSION_DENIED

[l-cesaro]

Hello,

I am currently facing an issue with calling the text-bison@001 API in my App Engine deployment. While the API works perfectly fine on my local machine, I encounter the following error message when calling the API from the deployed app:

```
403 Permission 'aiplatform.endpoints.predict' denied on resource '//aiplatform.googleapis.com/projects/tr-media-analysis/locations/us-central1/publishers/google/models/text-bison@001' (or it may not exist). [reason: "IAM_PERMISSION_DENIED"]
```

I have already checked the Service Account associated with the App Engine, and it has been granted the necessary AI Platform Developer rights.

I would greatly appreciate any insights or suggestions on how to resolve this problem. Are there any additional permissions or configurations that I might be missing?

Thank you in advance for your assistance!

Best regards,
Ludovico

[Marramirez]

Hi @l-cesaro,

I recommend that you raise this concern with Google Cloud Support as this issue may require further investigation.

Thank you!

[EliseBenAd]

Hi @Marramirez, I have the same error when trying to run predictions on my Vertex AI Workbench Jupyter Notebook, although it runs fine in a Colab one. Any ideas why it could happen ?

[deadsoul44]

Hi @l-cesaro,

Did you find a solution? I have the same problem.

[l-cesaro · Accepted solution]

Hi, @deadsoul44 

I searched on our repo and in notes but I really couldn't find how it was resolved.

I noted we had some issues but not sure they were that; really sorry. 😞

- were missing a role for the app engine 
- the routing was misconfigured due to an external issue

If you can open i suggest you to open support ticket.

EDIT: I found and was missing one of the vertex AI roles needed.

Cheers

[ankurugra]

Could you please share which Vertex AI roles was missing?

[retry2z]

Hi, 

The same problem here with cloud functions.

[jportal]

Need and this role Lector de Cloud Spanner

[meetrais]

After spending multiple hours to solve this problem, this solution worked for me. Shout out to Edi Wiraya.

[Olexandr]

This is correct answer You should extends roles for your service account