Permission	admin	importer	cryptoKeyEncrypterDecrypter	signerVerifier	cryptoKeyDecrypter	cryptoKeyEncrypter	publicKeyViewer	signer	serviceAgent
cloudkms.cryptoKeyVersions.create	✔
cloudkms.cryptoKeyVersions.destroy	✔
cloudkms.cryptoKeyVersions.get	✔
cloudkms.cryptoKeyVersions.list	✔
cloudkms.cryptoKeyVersions.restore	✔
cloudkms.cryptoKeyVersions.update	✔
cloudkms.cryptoKeyVersions.useToDecrypt			✔		✔
cloudkms.cryptoKeyVersions.useToEncrypt			✔			✔
cloudkms.cryptoKeyVersions.useToSign				✔				✔
cloudkms.cryptoKeyVersions.viewPublicKey				✔			✔
cloudkms.cryptoKeys.create	✔
cloudkms.cryptoKeys.get	✔
cloudkms.cryptoKeys.getIamPolicy	✔
cloudkms.cryptoKeys.list	✔
cloudkms.cryptoKeys.setIamPolicy	✔
cloudkms.cryptoKeys.update	✔
cloudkms.importJobs.create	✔	✔
cloudkms.importJobs.get	✔	✔
cloudkms.importJobs.getIamPolicy	✔
cloudkms.importJobs.list	✔	✔
cloudkms.importJobs.setIamPolicy	✔
cloudkms.importJobs.useToImport	✔	✔
cloudkms.keyRings.create	✔
cloudkms.keyRings.get	✔
cloudkms.keyRings.getIamPolicy	✔
cloudkms.keyRings.list	✔
cloudkms.keyRings.setIamPolicy	✔
resourcemanager.projects.get	✔	✔	✔	✔	✔	✔	✔	✔