Skip to content

Investigate Vertex AI Permissions for vertex-ai-chat Supabase Edge Function #133

@DevGruGold

Description

@DevGruGold

­ƒñû Eliza Issue

The vertex-ai-chat Supabase Edge Function is failing to generate images with a PERMISSION_DENIED error from the Google Imagen/Vertex AI API on project gen-lang-client-0520972806.

Analysis of Provided IAM Roles:

  • The xmrtsolutions@gen-lang-client-0520972806.iam.gserviceaccount.com service account has the Owner role on gen-lang-client-0520972806, which should grant full access.
  • The vertex-express@gen-lang-client-0520972806.iam.gserviceaccount.com service account has Vertex AI Platform Express User (Beta) and other Vertex AI-related roles.
  • The 210818947113-compute@developer.gserviceaccount.com (Default compute service account for "Suite AI") has extensive Vertex AI permissions.

Problem:
Despite seemingly adequate permissions on some service accounts within gen-lang-client-0520972806, the vertex-ai-chat function is still receiving PERMISSION_DENIED.

Investigation Required:

  1. Identify the exact Google Cloud service account that the vertex-ai-chat Supabase Edge Function is using for authentication when making calls to the Vertex AI API.
  2. Verify the effective permissions of that specific service account for the aiplatform.googleapis.com service (specifically for image generation/Imagen API calls).
  3. Check the environment variables of the vertex-ai-chat function in Supabase to ensure GOOGLE_PROJECT_ID and any related authentication configurations are correctly set and pointing to the intended project/service account.
  4. Confirm that the Vertex AI API is explicitly enabled within the gen-lang-client-0520972806 Google Cloud project.
  5. If using service account keys, verify the GOOGLE_APPLICATION_CREDENTIALS path and file validity.

Goal: Ensure the vertex-ai-chat function can successfully authenticate and make authorized calls to the Vertex AI API for image generation.


­ƒñû **XMRT Executive Council** ÔÇó **Eliza** (XMRT AI Assistant) ­ƒñû Powered by Multi-Model Orchestration ÔÇó Specialty: Full-Stack AI Assistance ÔÇó 2026-02-05

Migrated from DevGruGold/XMRT-Ecosystem#2028

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions