Permission	admin	editor	serviceAgent	reader	monitoringServiceAgent
assuredworkloads.operations.get	✔	✔		✔
assuredworkloads.operations.list	✔	✔		✔
assuredworkloads.updates.list	✔	✔		✔
assuredworkloads.updates.update	✔	✔
assuredworkloads.violations.get	✔	✔		✔
assuredworkloads.violations.list	✔	✔		✔
assuredworkloads.violations.update	✔	✔
assuredworkloads.workload.create	✔	✔
assuredworkloads.workload.delete	✔	✔
assuredworkloads.workload.get	✔	✔		✔
assuredworkloads.workload.list	✔	✔		✔
assuredworkloads.workload.update	✔	✔
axt.labels.set	✔	✔
bigquery.config.update	✔	✔
cloudasset.assets.exportResource					✔
cloudasset.assets.listResource					✔
cloudasset.feeds.create					✔
cloudasset.feeds.delete					✔
cloudasset.feeds.get					✔
cloudkms.cryptoKeys.create			✔
cloudkms.keyRings.create			✔
logging.settings.update	✔	✔
orgpolicy.policies.create	✔	✔
orgpolicy.policies.delete	✔	✔
orgpolicy.policies.list	✔	✔	✔	✔
orgpolicy.policies.update	✔	✔
orgpolicy.policy.get	✔	✔	✔	✔
orgpolicy.policy.set	✔	✔
resourcemanager.folders.create	✔	✔
resourcemanager.folders.get	✔	✔		✔
resourcemanager.folders.list	✔	✔		✔
resourcemanager.organizations.get	✔	✔		✔
resourcemanager.projects.create	✔	✔
resourcemanager.projects.get	✔	✔		✔
resourcemanager.projects.list	✔	✔		✔
serviceusage.consumerpolicy.analyze			✔
serviceusage.consumerpolicy.get			✔
serviceusage.consumerpolicy.update			✔
serviceusage.effectivepolicy.get			✔
serviceusage.groups.list			✔
serviceusage.groups.listExpandedMembers			✔
serviceusage.groups.listMembers			✔
serviceusage.services.enable			✔
serviceusage.services.get			✔
serviceusage.services.use			✔
serviceusage.values.test			✔