---
title: Configuring Vertex AI
description: Connect PingOne Privilege to Google Vertex AI so AI discovery can review its agent inventory.
component: privilege
page_id: privilege:agent-privilege:configuration/workload-agent-apps/vertex-ai
canonical_url: https://docs.pingidentity.com/privilege/agent-privilege/configuration/workload-agent-apps/vertex-ai.html
llms_txt: https://docs.pingidentity.com/privilege/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: October 21, 2026
---

# Configuring Vertex AI

Connect Google Vertex AI as a workload agent application so AI discovery for workload agents can review the agents running in the project. Learn more in [Discover and manage workload agents](../../use-cases/workload-agents.html).

1. In the PingOne Privilege admin console, go to **AI Security > Workload Agents**.

2. Click the **Add Application** tab.

3. In the list of available applications, find **Vertex AI** and click **[icon: plus, set=fa]Integrate**.

4. Enter a **Name** for the connection.

5. (Optional) Enter a **Description**.

6. Click **Next**.

7. Create a GCP service account, and assign it the required roles:

   * `roles/browser`

   * `roles/aiplatform.user`

   * `roles/dialogflow.reader`

   * `roles/discoveryengine.viewer`

   * `roles/iam.securityReviewer`

   * `roles/agentregistry.editor`

   * `roles/dialogflow.admin`

   * `roles/discoveryengine.editor`

   * `roles/CloudAgentVertexActions`

   * `resourcemanager.projects.setIamPolicy`

8. Click **Next**.

9. Paste the full contents of your GCP **Service Account JSON**, then click **Next**.

10. Review the summary, then click **Add Connection**.

You can now validate that the connection is active in the **Active Applications** tab.