Permission	serviceAgent	admin	editor	catalogAdmin	viewer	catalogEditor	storageDataOwner	entryGroupOwner	entryOwner	developer	metadataWriter	taxonomyAdmin	catalogViewer	storageDataReader	aspectTypeOwner	dataScanAdmin	entryTypeOwner	dataScanEditor	metadataReader	bindingAdmin	metadataJobOwner	aspectTypeUser	entryTypeUser	taxonomyViewer	metadataJobViewer	dataScanCreator	dataScanDataViewer	entryGroupExporter	entryGroupImporter	storageDataWriter	dataOwner	dataScanViewer	securityAdmin	dataReader	dataWriter
bigquery.bireservations.get	✔
bigquery.bireservations.update	✔
bigquery.capacityCommitments.create	✔
bigquery.capacityCommitments.delete	✔
bigquery.capacityCommitments.get	✔
bigquery.capacityCommitments.list	✔
bigquery.capacityCommitments.update	✔
bigquery.config.get	✔
bigquery.config.update	✔
bigquery.connections.create	✔
bigquery.connections.delegate	✔
bigquery.connections.delete	✔
bigquery.connections.get	✔
bigquery.connections.getIamPolicy	✔
bigquery.connections.list	✔
bigquery.connections.setIamPolicy	✔
bigquery.connections.update	✔
bigquery.connections.updateTag	✔
bigquery.connections.use	✔
bigquery.dataPolicies.create	✔
bigquery.dataPolicies.delete	✔
bigquery.dataPolicies.get	✔
bigquery.dataPolicies.getIamPolicy	✔
bigquery.dataPolicies.list	✔
bigquery.dataPolicies.setIamPolicy	✔
bigquery.dataPolicies.update	✔
bigquery.datasets.create	✔
bigquery.datasets.createTagBinding	✔
bigquery.datasets.delete	✔
bigquery.datasets.deleteTagBinding	✔
bigquery.datasets.get	✔						✔							✔
bigquery.datasets.getIamPolicy	✔
bigquery.datasets.link	✔
bigquery.datasets.listEffectiveTags	✔
bigquery.datasets.listSharedDatasetUsage	✔
bigquery.datasets.listTagBindings	✔
bigquery.datasets.setIamPolicy	✔
bigquery.datasets.update	✔
bigquery.datasets.updateTag	✔
bigquery.jobs.create	✔
bigquery.jobs.delete	✔
bigquery.jobs.get	✔
bigquery.jobs.list	✔
bigquery.jobs.listAll	✔
bigquery.jobs.listExecutionMetadata	✔
bigquery.jobs.update	✔
bigquery.models.create	✔						✔
bigquery.models.delete	✔						✔
bigquery.models.export	✔						✔							✔
bigquery.models.getData	✔						✔							✔
bigquery.models.getMetadata	✔						✔							✔
bigquery.models.list	✔						✔							✔
bigquery.models.updateData	✔						✔
bigquery.models.updateMetadata	✔						✔
bigquery.models.updateTag	✔
bigquery.readsessions.create	✔
bigquery.readsessions.getData	✔
bigquery.readsessions.update	✔
bigquery.reservationAssignments.create	✔
bigquery.reservationAssignments.delete	✔
bigquery.reservationAssignments.list	✔
bigquery.reservationAssignments.search	✔
bigquery.reservations.create	✔
bigquery.reservations.delete	✔
bigquery.reservations.get	✔
bigquery.reservations.list	✔
bigquery.reservations.update	✔
bigquery.routines.create	✔						✔
bigquery.routines.delete	✔						✔
bigquery.routines.get	✔						✔							✔
bigquery.routines.list	✔						✔							✔
bigquery.routines.update	✔						✔
bigquery.routines.updateTag	✔
bigquery.rowAccessPolicies.create	✔
bigquery.rowAccessPolicies.delete	✔
bigquery.rowAccessPolicies.getIamPolicy	✔
bigquery.rowAccessPolicies.list	✔
bigquery.rowAccessPolicies.overrideTimeTravelRestrictions	✔
bigquery.rowAccessPolicies.setIamPolicy	✔
bigquery.rowAccessPolicies.update	✔
bigquery.savedqueries.create	✔
bigquery.savedqueries.delete	✔
bigquery.savedqueries.get	✔
bigquery.savedqueries.list	✔
bigquery.savedqueries.update	✔
bigquery.tables.create	✔						✔
bigquery.tables.createIndex	✔
bigquery.tables.createSnapshot	✔						✔
bigquery.tables.createTagBinding	✔
bigquery.tables.delete	✔						✔
bigquery.tables.deleteIndex	✔
bigquery.tables.deleteSnapshot	✔						✔
bigquery.tables.deleteTagBinding	✔
bigquery.tables.export	✔						✔							✔
bigquery.tables.get	✔						✔							✔
bigquery.tables.getData	✔						✔							✔
bigquery.tables.getIamPolicy	✔
bigquery.tables.list	✔						✔							✔
bigquery.tables.listEffectiveTags	✔
bigquery.tables.listTagBindings	✔
bigquery.tables.replicateData	✔
bigquery.tables.restoreSnapshot	✔						✔
bigquery.tables.setCategory	✔
bigquery.tables.setColumnDataPolicy	✔
bigquery.tables.setIamPolicy	✔
bigquery.tables.update	✔						✔
bigquery.tables.updateData	✔						✔																							✔
bigquery.tables.updateTag	✔
bigquery.transfers.get	✔
bigquery.transfers.update	✔
bigquerymigration.translation.translate	✔
cloudasset.assets.analyzeIamPolicy		✔	✔		✔
cloudasset.assets.searchAllIamPolicies		✔
cloudasset.assets.searchAllResources		✔
datacatalog.catalogs.searchAll	✔
datacatalog.categories.getIamPolicy	✔
datacatalog.categories.setIamPolicy	✔
datacatalog.entries.get	✔
datacatalog.taxonomies.create	✔
datacatalog.taxonomies.delete	✔
datacatalog.taxonomies.get	✔
datacatalog.taxonomies.list	✔
datacatalog.taxonomies.update	✔
dataform.compilationResults.create	✔
dataform.compilationResults.get	✔
dataform.compilationResults.list	✔
dataform.compilationResults.query	✔
dataform.config.get	✔
dataform.config.update	✔
dataform.locations.get	✔
dataform.locations.list	✔
dataform.releaseConfigs.create	✔
dataform.releaseConfigs.delete	✔
dataform.releaseConfigs.get	✔
dataform.releaseConfigs.list	✔
dataform.releaseConfigs.update	✔
dataform.repositories.commit	✔
dataform.repositories.computeAccessTokenStatus	✔
dataform.repositories.create	✔
dataform.repositories.delete	✔
dataform.repositories.fetchHistory	✔
dataform.repositories.fetchRemoteBranches	✔
dataform.repositories.get	✔
dataform.repositories.getIamPolicy	✔
dataform.repositories.list	✔
dataform.repositories.queryDirectoryContents	✔
dataform.repositories.readFile	✔
dataform.repositories.setIamPolicy	✔
dataform.repositories.update	✔
dataform.workflowConfigs.create	✔
dataform.workflowConfigs.delete	✔
dataform.workflowConfigs.get	✔
dataform.workflowConfigs.list	✔
dataform.workflowConfigs.update	✔
dataform.workflowInvocations.cancel	✔
dataform.workflowInvocations.create	✔
dataform.workflowInvocations.delete	✔
dataform.workflowInvocations.get	✔
dataform.workflowInvocations.list	✔
dataform.workflowInvocations.query	✔
dataform.workspaces.commit	✔
dataform.workspaces.create	✔
dataform.workspaces.delete	✔
dataform.workspaces.fetchFileDiff	✔
dataform.workspaces.fetchFileGitStatuses	✔
dataform.workspaces.fetchGitAheadBehind	✔
dataform.workspaces.get	✔
dataform.workspaces.getIamPolicy	✔
dataform.workspaces.installNpmPackages	✔
dataform.workspaces.list	✔
dataform.workspaces.makeDirectory	✔
dataform.workspaces.moveDirectory	✔
dataform.workspaces.moveFile	✔
dataform.workspaces.pull	✔
dataform.workspaces.push	✔
dataform.workspaces.queryDirectoryContents	✔
dataform.workspaces.readFile	✔
dataform.workspaces.removeDirectory	✔
dataform.workspaces.removeFile	✔
dataform.workspaces.reset	✔
dataform.workspaces.searchFiles	✔
dataform.workspaces.setIamPolicy	✔
dataform.workspaces.writeFile	✔
dataplex.aspectTypes.create				✔		✔									✔
dataplex.aspectTypes.delete				✔		✔									✔
dataplex.aspectTypes.get				✔		✔		✔	✔				✔		✔							✔
dataplex.aspectTypes.getIamPolicy				✔		✔							✔		✔
dataplex.aspectTypes.list				✔		✔		✔	✔				✔		✔							✔
dataplex.aspectTypes.setIamPolicy				✔											✔
dataplex.aspectTypes.update				✔		✔									✔
dataplex.aspectTypes.use				✔		✔		✔	✔						✔							✔
dataplex.assetActions.list		✔	✔		✔
dataplex.assets.create		✔	✔
dataplex.assets.delete		✔	✔
dataplex.assets.get		✔	✔		✔						✔								✔
dataplex.assets.getIamPolicy	✔	✔	✔		✔
dataplex.assets.list		✔	✔		✔						✔								✔
dataplex.assets.ownData																															✔
dataplex.assets.readData																															✔			✔
dataplex.assets.setIamPolicy		✔
dataplex.assets.update		✔	✔
dataplex.assets.writeData																															✔				✔
dataplex.content.create		✔								✔
dataplex.content.delete		✔	✔							✔
dataplex.content.get		✔	✔		✔					✔
dataplex.content.getIamPolicy		✔	✔		✔					✔
dataplex.content.list		✔	✔		✔					✔
dataplex.content.setIamPolicy		✔								✔
dataplex.content.update		✔								✔
dataplex.dataAttributeBindings.create		✔	✔																	✔
dataplex.dataAttributeBindings.delete		✔	✔																	✔
dataplex.dataAttributeBindings.get		✔	✔		✔															✔
dataplex.dataAttributeBindings.getIamPolicy		✔	✔		✔															✔
dataplex.dataAttributeBindings.list		✔	✔		✔															✔
dataplex.dataAttributeBindings.setIamPolicy		✔																		✔
dataplex.dataAttributeBindings.update		✔	✔																	✔
dataplex.dataAttributes.bind		✔	✔									✔
dataplex.dataAttributes.create		✔	✔									✔
dataplex.dataAttributes.delete		✔	✔									✔
dataplex.dataAttributes.get		✔	✔		✔							✔												✔
dataplex.dataAttributes.getIamPolicy		✔	✔		✔							✔												✔
dataplex.dataAttributes.list		✔	✔		✔							✔												✔
dataplex.dataAttributes.setIamPolicy		✔										✔
dataplex.dataAttributes.update		✔	✔									✔
dataplex.dataTaxonomies.configureDataAccess		✔	✔																														✔
dataplex.dataTaxonomies.configureResourceAccess		✔	✔																														✔
dataplex.dataTaxonomies.create		✔	✔									✔
dataplex.dataTaxonomies.delete		✔	✔									✔
dataplex.dataTaxonomies.get		✔	✔		✔							✔												✔
dataplex.dataTaxonomies.getIamPolicy		✔	✔		✔							✔												✔
dataplex.dataTaxonomies.list		✔	✔		✔							✔												✔
dataplex.dataTaxonomies.setIamPolicy		✔										✔
dataplex.dataTaxonomies.update		✔	✔									✔
dataplex.datascans.create		✔	✔													✔		✔								✔
dataplex.datascans.delete		✔	✔													✔		✔
dataplex.datascans.get		✔	✔		✔											✔		✔								✔	✔					✔
dataplex.datascans.getData		✔														✔		✔									✔
dataplex.datascans.getIamPolicy		✔	✔		✔											✔		✔									✔					✔
dataplex.datascans.list		✔	✔		✔											✔		✔								✔	✔					✔
dataplex.datascans.run		✔	✔													✔		✔
dataplex.datascans.setIamPolicy		✔														✔
dataplex.datascans.update		✔	✔													✔		✔
dataplex.entities.create		✔									✔
dataplex.entities.delete		✔									✔
dataplex.entities.get		✔									✔								✔
dataplex.entities.list		✔									✔								✔
dataplex.entities.update		✔									✔
dataplex.entries.create				✔		✔		✔	✔
dataplex.entries.delete				✔		✔		✔	✔
dataplex.entries.get				✔		✔		✔	✔				✔
dataplex.entries.list				✔		✔		✔	✔				✔
dataplex.entries.update				✔		✔		✔	✔
dataplex.entryGroups.create				✔		✔		✔
dataplex.entryGroups.delete				✔		✔		✔
dataplex.entryGroups.export		✔		✔				✔																				✔
dataplex.entryGroups.get				✔		✔		✔	✔				✔															✔	✔
dataplex.entryGroups.getIamPolicy				✔		✔		✔					✔
dataplex.entryGroups.import		✔		✔				✔																					✔
dataplex.entryGroups.list				✔		✔		✔					✔
dataplex.entryGroups.setIamPolicy				✔				✔
dataplex.entryGroups.update				✔		✔		✔
dataplex.entryGroups.useContactsAspect				✔		✔		✔	✔
dataplex.entryGroups.useGenericAspect				✔		✔		✔	✔
dataplex.entryGroups.useGenericEntry				✔		✔		✔	✔
dataplex.entryGroups.useOverviewAspect				✔		✔		✔	✔
dataplex.entryGroups.useSchemaAspect				✔		✔		✔	✔
dataplex.entryTypes.create				✔		✔											✔
dataplex.entryTypes.delete				✔		✔											✔
dataplex.entryTypes.get				✔		✔		✔	✔				✔				✔						✔
dataplex.entryTypes.getIamPolicy				✔		✔							✔				✔
dataplex.entryTypes.list				✔		✔		✔	✔				✔				✔						✔
dataplex.entryTypes.setIamPolicy				✔													✔
dataplex.entryTypes.update				✔		✔											✔
dataplex.entryTypes.use				✔		✔		✔	✔								✔						✔
dataplex.environments.create		✔	✔
dataplex.environments.delete		✔	✔
dataplex.environments.execute	✔	✔								✔
dataplex.environments.get	✔	✔	✔		✔					✔
dataplex.environments.getIamPolicy		✔	✔		✔
dataplex.environments.list	✔	✔	✔		✔					✔
dataplex.environments.setIamPolicy		✔
dataplex.environments.update		✔	✔
dataplex.lakeActions.list		✔	✔		✔
dataplex.lakes.create		✔	✔
dataplex.lakes.delete		✔	✔
dataplex.lakes.get	✔	✔	✔		✔
dataplex.lakes.getIamPolicy	✔	✔	✔		✔
dataplex.lakes.list		✔	✔		✔
dataplex.lakes.setIamPolicy		✔
dataplex.lakes.update		✔	✔
dataplex.locations.get		✔
dataplex.locations.list		✔
dataplex.metadataJobs.cancel		✔																			✔
dataplex.metadataJobs.create		✔																			✔
dataplex.metadataJobs.get		✔																			✔				✔
dataplex.metadataJobs.list		✔																			✔				✔
dataplex.operations.cancel		✔	✔
dataplex.operations.delete		✔	✔
dataplex.operations.get		✔	✔		✔											✔		✔			✔				✔	✔
dataplex.operations.list		✔	✔		✔											✔		✔
dataplex.partitions.create		✔									✔
dataplex.partitions.delete		✔									✔
dataplex.partitions.get		✔									✔								✔
dataplex.partitions.list		✔									✔								✔
dataplex.partitions.update		✔									✔
dataplex.projects.search	✔			✔		✔		✔	✔				✔		✔		✔					✔	✔
dataplex.tasks.cancel		✔	✔							✔
dataplex.tasks.create		✔	✔							✔
dataplex.tasks.delete		✔	✔							✔
dataplex.tasks.get		✔	✔		✔					✔
dataplex.tasks.getIamPolicy		✔	✔		✔
dataplex.tasks.list		✔	✔		✔					✔
dataplex.tasks.run		✔	✔							✔
dataplex.tasks.setIamPolicy		✔
dataplex.tasks.update		✔	✔							✔
dataplex.zoneActions.list		✔	✔		✔
dataplex.zones.create		✔	✔
dataplex.zones.delete		✔	✔
dataplex.zones.get		✔	✔		✔						✔								✔
dataplex.zones.getIamPolicy	✔	✔	✔		✔
dataplex.zones.list		✔	✔		✔						✔								✔
dataplex.zones.setIamPolicy		✔
dataplex.zones.update		✔	✔
dataproc.batches.cancel	✔
dataproc.batches.create	✔
dataproc.batches.get	✔
dataproc.operations.cancel	✔
dataproc.operations.get	✔
dataproc.operations.list	✔
firebase.projects.get	✔
iam.serviceAccounts.actAs	✔
logging.logEntries.create	✔
logging.logEntries.route	✔
metastore.services.get	✔
monitoring.metricDescriptors.create	✔
monitoring.metricDescriptors.get	✔
monitoring.metricDescriptors.list	✔
monitoring.monitoredResourceDescriptors.get	✔
monitoring.monitoredResourceDescriptors.list	✔
monitoring.timeSeries.create	✔
orgpolicy.policy.get	✔
recommender.iamPolicyInsights.get	✔
recommender.iamPolicyInsights.list	✔
recommender.iamPolicyInsights.update	✔
recommender.iamPolicyRecommendations.get	✔
recommender.iamPolicyRecommendations.list	✔
recommender.iamPolicyRecommendations.update	✔
recommender.storageBucketSoftDeleteInsights.get	✔
recommender.storageBucketSoftDeleteInsights.list	✔
recommender.storageBucketSoftDeleteInsights.update	✔
recommender.storageBucketSoftDeleteRecommendations.get	✔
recommender.storageBucketSoftDeleteRecommendations.list	✔
recommender.storageBucketSoftDeleteRecommendations.update	✔
resourcemanager.hierarchyNodes.listEffectiveTags	✔
resourcemanager.projects.get	✔	✔		✔		✔		✔	✔		✔		✔		✔		✔		✔		✔	✔	✔		✔			✔	✔
resourcemanager.projects.list	✔	✔		✔		✔		✔	✔		✔		✔		✔		✔		✔		✔	✔	✔		✔			✔	✔
servicemanagement.services.report	✔
serviceusage.services.use	✔
storage.anywhereCaches.create	✔
storage.anywhereCaches.disable	✔
storage.anywhereCaches.get	✔
storage.anywhereCaches.list	✔
storage.anywhereCaches.pause	✔
storage.anywhereCaches.resume	✔
storage.anywhereCaches.update	✔
storage.bucketOperations.cancel	✔
storage.bucketOperations.get	✔
storage.bucketOperations.list	✔
storage.buckets.create	✔
storage.buckets.createTagBinding	✔
storage.buckets.delete	✔
storage.buckets.deleteTagBinding	✔
storage.buckets.enableObjectRetention	✔
storage.buckets.get	✔						✔							✔
storage.buckets.getIamPolicy	✔
storage.buckets.getObjectInsights	✔
storage.buckets.list	✔
storage.buckets.listEffectiveTags	✔
storage.buckets.listTagBindings	✔
storage.buckets.restore	✔
storage.buckets.setIamPolicy	✔
storage.buckets.update	✔
storage.folders.create	✔
storage.folders.delete	✔
storage.folders.get	✔
storage.folders.list	✔
storage.folders.rename	✔
storage.managedFolders.create	✔
storage.managedFolders.delete	✔
storage.managedFolders.get	✔
storage.managedFolders.getIamPolicy	✔
storage.managedFolders.list	✔
storage.managedFolders.setIamPolicy	✔
storage.managementHubs.get	✔
storage.managementHubs.update	✔
storage.multipartUploads.abort	✔
storage.multipartUploads.create	✔
storage.multipartUploads.list	✔
storage.multipartUploads.listParts	✔
storage.objects.create	✔						✔																							✔
storage.objects.delete	✔						✔																							✔
storage.objects.get	✔						✔							✔
storage.objects.getIamPolicy	✔
storage.objects.list	✔						✔							✔
storage.objects.overrideUnlockedRetention	✔
storage.objects.restore	✔
storage.objects.setIamPolicy	✔
storage.objects.setRetention	✔
storage.objects.update	✔						✔																							✔