Google 对话流 PERMISSION_DENIED 异常

Question

I am trying to access a Google DialogFlow from a Windows Java application. I have the environment variable, GOOGLE_APPLICATION_CREDENTIALS , properly set and I can call other Google APIs. However, when I call:

DetectIntentResponse response = sessionsClient.detectIntent(session, queryInput);

I receive a grpc exception:

PERMISSION_DENIED: IAM permission 'dialogflow.sessions.detectIntent' on 'projects/newagent-a0ef5/agent' denied.Session Path: projects/NewAgent/agent/sessions/xxxx

"newagent-a0ef5" is the project ID of my flow. "xxxx" is just a random Session ID token.

I understand that I have to enable dialogflow.sessions.detectIntent access, but I cannot figure out where. I created a custom role with that value and added it to the three IAM accounts associated with my flow. I have also enabled the DialogFlow API.

Does anyone know where I add this missing permission?

Answer 1

I did all the IAM steps properly, but I was passing the wrong Project ID to detectIntent. So I guess a couple things to check...

• Make sure the Project ID is correct. Your session path should be 'projects/<Project ID>/agent/sessions/<Session ID>'.
• Make sure you are using a service account with the Dialogflow API Client role.
• Try getting it to work in API Explorer

Answer 2

I had the same problem when I was creating a chatbot. I solve this by using a Dialogflow API Client role. I also had to change my ruby version from 2.6 to 2.5.1.

It is important to remember that the GOOGLE_APPLICATION_CREDENTIALS have to point to the key .json file. To avoid problems set the path to the json file in the .bashrc file. So you don't have execute export GOOGLE_APPLICATION_CREDENTIALS="[PATH]" every time you restart your machine.

Answer 3

There are following things we need to check:

1. You are right project ID:
2. IAM role should be ADMIN : Admin Project > Owner(Full access to all Dialogflow (console and API) and GCP resources. Can use console to create agent.)

Ref to add IAM user(don't forget to choose rule as Admin): https://dialogflow.com/docs/reference/v2-auth-setup

Answer 4

In my case the error occurred because GOOGLE_CLOUD_PROJECT was set with Project Name (a word in mixed case), but it should be ProjectID (a word lower case). After I changed it to ProjectID, it started working. HTH

Answer 5

i also had this error, it could be that you're failing to set environment on the json credentials, make sure it is correct, i didn't need an admin role for mine.

to set path for GOOGLE_APPLICATION_CREDENTIALS on cmd on wherever directory you are, point your json file as if you would do on environment varialbes(will be removed when you close cmd):

set GOOGLE_APPLICATION_CREDENTIALS=C:\\Users\\Owner\\Desktop\\reactbot\\config\\ddssa-adietv-aasddss.json