nerdexam
Google

PROFESSIONAL-MACHINE-LEARNING-ENGINEER · Question #282

You recently created a new Google Cloud project. After testing that you can submit a Vertex AI Pipeline job from the Cloud Shell, you want to use a Vertex AI Workbench user-managed notebook instance…

The correct answer is C. Ensure that the Vertex AI Workbench instance is assigned the Identity and Access Management. When a Vertex AI Workbench notebook fails with insufficient permissions, ensure the notebook's underlying service account has the necessary IAM roles to interact with Vertex AI services.

Submitted by andreas_gr· Apr 18, 2026ML pipeline operationalization

Question

You recently created a new Google Cloud project. After testing that you can submit a Vertex AI Pipeline job from the Cloud Shell, you want to use a Vertex AI Workbench user-managed notebook instance to run your code from that instance. You created the instance and ran the code but this time the job fails with an insufficient permissions error. What should you do?

Options

  • AEnsure that the Workbench instance that you created is in the same region of the Vertex AI
  • BEnsure that the Vertex AI Workbench instance is on the same subnetwork of the Vertex AI
  • CEnsure that the Vertex AI Workbench instance is assigned the Identity and Access Management
  • DEnsure that the Vertex AI Workbench instance is assigned the Identity and Access Management

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    12% (2)
  • C
    76% (13)
  • D
    6% (1)

Why each option

When a Vertex AI Workbench notebook fails with insufficient permissions, ensure the notebook's underlying service account has the necessary IAM roles to interact with Vertex AI services.

AEnsure that the Workbench instance that you created is in the same region of the Vertex AI

The region of the Workbench instance does not typically cause an 'insufficient permissions' error; permissions are managed via IAM roles.

BEnsure that the Vertex AI Workbench instance is on the same subnetwork of the Vertex AI

The subnetwork configuration of the Workbench instance is related to network access, not directly to 'insufficient permissions' for Vertex AI services.

CEnsure that the Vertex AI Workbench instance is assigned the Identity and Access ManagementCorrect

The 'Vertex AI User' IAM role grants permissions to manage and use Vertex AI resources, including submitting pipeline jobs, which is required for the Workbench instance's service account to successfully interact with other Vertex AI services.

DEnsure that the Vertex AI Workbench instance is assigned the Identity and Access Management

The 'Service Account User' role allows impersonating a service account, but the Workbench instance's own service account needs the direct permissions to perform Vertex AI operations.

Concept tested: Vertex AI Workbench IAM permissions

Source: https://cloud.google.com/vertex-ai/docs/workbench/user-managed/create-instance#permissions

Topics

#IAM#Permissions#Vertex AI Workbench#Troubleshooting

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-MACHINE-LEARNING-ENGINEER Practice