PingOne Privilege

Configuring Vertex AI

Connect Google Vertex AI as a workload agent application so AI discovery for workload agents can review the agents running in the project. Learn more in Discover and manage workload agents.

  1. In the PingOne Privilege admin console, go to AI Security > Workload Agents.

  2. Click the Add Application tab.

  3. In the list of available applications, find Vertex AI and click Integrate.

  4. Enter a Name for the connection.

  5. (Optional) Enter a Description.

  6. Click Next.

  7. Create a GCP service account, and assign it the required roles:

    • roles/browser

    • roles/aiplatform.user

    • roles/dialogflow.reader

    • roles/discoveryengine.viewer

    • roles/iam.securityReviewer

    • roles/agentregistry.editor

    • roles/dialogflow.admin

    • roles/discoveryengine.editor

    • roles/CloudAgentVertexActions

    • resourcemanager.projects.setIamPolicy

  8. Click Next.

  9. Paste the full contents of your GCP Service Account JSON, then click Next.

  10. Review the summary, then click Add Connection.

You can now validate that the connection is active in the Active Applications tab.