无法 start/stop AI Platform 中的 AI Platform Notebook 实例,但可以在 Compute Engine 中

Unable to start/stop an AI Platform Notebook Instance in AI Platform but Able to in Compute Engine

我正在为用户设置权限以使用 GCP AI Platform 中预先创建的 AI Platform VM 实例。我创建了一个具有权限的自定义角色

compute.acceleratorTypes.list
compute.diskTypes.list
compute.instances.list
compute.instances.start
compute.instances.stop
compute.machineTypes.list
compute.subnetworks.list
iam.serviceAccounts.actAs
notebooks.environments.get
notebooks.environments.getIamPolicy
notebooks.environments.list
notebooks.instances.get
notebooks.instances.getIamPolicy
notebooks.instances.list
notebooks.locations.get
notebooks.locations.list
notebooks.operations.get
notebooks.operations.list
resourcemanager.projects.get

用户可以从 GCP 控制台的计算引擎部分启动和停止实例,但 不能从 AI 平台部分。当我尝试后者时,出现错误:

sample-ai-platform-vm: Permission 'notebooks.instances.start' denied on 'projects/test-project/locations/us-east1-b/instances/sample-ai-platform-vm'

知道发生了什么吗?

您需要添加以下权限:

notebooks.instances.start
notebooks.instances.stop

您可以看一下Notebooks Admin角色以供参考:

https://cloud.google.com/ai-platform/notebooks/docs/iam