Permission	admin	editor	reader	serviceAgent	monitoringServiceAgent
assuredworkloads.operations.get	✔	✔	✔
assuredworkloads.operations.list	✔	✔	✔
assuredworkloads.updates.list	✔	✔	✔
assuredworkloads.updates.update	✔	✔
assuredworkloads.violations.get	✔	✔	✔
assuredworkloads.violations.list	✔	✔	✔
assuredworkloads.violations.update	✔	✔
assuredworkloads.workload.create	✔	✔
assuredworkloads.workload.delete	✔	✔
assuredworkloads.workload.get	✔	✔	✔
assuredworkloads.workload.list	✔	✔	✔
assuredworkloads.workload.update	✔	✔
axt.labels.set	✔	✔
bigquery.config.update	✔	✔
cloudasset.assets.exportResource					✔
cloudasset.assets.listResource					✔
cloudasset.feeds.create					✔
cloudasset.feeds.delete					✔
cloudasset.feeds.get					✔
cloudkms.cryptoKeys.create				✔
cloudkms.keyRings.create				✔
logging.settings.update	✔	✔
orgpolicy.policies.create	✔	✔
orgpolicy.policies.delete	✔	✔
orgpolicy.policies.list	✔	✔	✔	✔
orgpolicy.policies.update	✔	✔
orgpolicy.policy.get	✔	✔	✔	✔
orgpolicy.policy.set	✔	✔
resourcemanager.folders.create	✔	✔
resourcemanager.folders.get	✔	✔	✔
resourcemanager.folders.list	✔	✔	✔
resourcemanager.organizations.get	✔	✔	✔
resourcemanager.projects.create	✔	✔
resourcemanager.projects.get	✔	✔	✔
resourcemanager.projects.list	✔	✔	✔
serviceusage.services.enable				✔
serviceusage.services.get				✔
serviceusage.services.use				✔