Permission	bigqueryWriter	admin	serviceAgent	viewer
bigquery.connections.delegate	✔		✔
bigquery.connections.get	✔		✔
bigquery.datasets.create	✔		✔
bigquery.datasets.get	✔		✔
bigquery.jobs.create	✔		✔
bigquery.jobs.delete	✔		✔
bigquery.jobs.get	✔		✔
bigquery.jobs.list	✔		✔
bigquery.jobs.update	✔		✔
bigquery.routines.get			✔
bigquery.routines.list			✔
bigquery.tables.create	✔		✔
bigquery.tables.get	✔		✔
bigquery.tables.getData	✔		✔
bigquery.tables.list	✔		✔
bigquery.tables.update	✔		✔
bigquery.tables.updateData	✔		✔
compute.globalAddresses.create			✔
compute.globalAddresses.createInternal			✔
compute.globalAddresses.delete			✔
compute.globalAddresses.deleteInternal			✔
compute.globalAddresses.get			✔
compute.globalOperations.get			✔
compute.networkAttachments.get			✔
compute.networkAttachments.list			✔
compute.networks.addPeering			✔
compute.networks.get			✔
compute.networks.listPeeringRoutes			✔
compute.networks.removePeering			✔
compute.networks.use			✔
compute.routes.get			✔
compute.routes.list			✔
compute.subnetworks.get			✔
compute.subnetworks.list			✔
datastream.connectionProfiles.create	✔	✔
datastream.connectionProfiles.createTagBinding		✔
datastream.connectionProfiles.delete	✔	✔
datastream.connectionProfiles.deleteTagBinding		✔
datastream.connectionProfiles.destinationTypes	✔	✔		✔
datastream.connectionProfiles.discover	✔	✔		✔
datastream.connectionProfiles.get	✔	✔		✔
datastream.connectionProfiles.getIamPolicy	✔	✔		✔
datastream.connectionProfiles.list	✔	✔		✔
datastream.connectionProfiles.listEffectiveTags	✔	✔		✔
datastream.connectionProfiles.listStaticServiceIps	✔	✔		✔
datastream.connectionProfiles.listTagBindings	✔	✔		✔
datastream.connectionProfiles.setIamPolicy		✔
datastream.connectionProfiles.sourceTypes	✔	✔		✔
datastream.connectionProfiles.update	✔	✔
datastream.locations.fetchStaticIps	✔	✔		✔
datastream.locations.get	✔	✔		✔
datastream.locations.list	✔	✔		✔
datastream.objects.get	✔	✔		✔
datastream.objects.list	✔	✔		✔
datastream.objects.startBackfillJob	✔	✔
datastream.objects.stopBackfillJob	✔	✔
datastream.operations.cancel	✔	✔
datastream.operations.delete	✔	✔
datastream.operations.get	✔	✔		✔
datastream.operations.list	✔	✔		✔
datastream.privateConnections.create	✔	✔
datastream.privateConnections.createTagBinding		✔
datastream.privateConnections.delete	✔	✔
datastream.privateConnections.deleteTagBinding		✔
datastream.privateConnections.get	✔	✔		✔
datastream.privateConnections.getIamPolicy	✔	✔		✔
datastream.privateConnections.list	✔	✔		✔
datastream.privateConnections.listEffectiveTags	✔	✔		✔
datastream.privateConnections.listTagBindings	✔	✔		✔
datastream.privateConnections.setIamPolicy		✔
datastream.routes.create	✔	✔
datastream.routes.delete	✔	✔
datastream.routes.get	✔	✔		✔
datastream.routes.getIamPolicy	✔	✔		✔
datastream.routes.list	✔	✔		✔
datastream.routes.setIamPolicy		✔
datastream.streams.computeState	✔	✔
datastream.streams.create	✔	✔
datastream.streams.createTagBinding		✔
datastream.streams.delete	✔	✔
datastream.streams.deleteTagBinding		✔
datastream.streams.fetchErrors	✔	✔		✔
datastream.streams.get	✔	✔		✔
datastream.streams.getIamPolicy	✔	✔		✔
datastream.streams.list	✔	✔		✔
datastream.streams.listEffectiveTags	✔	✔		✔
datastream.streams.listTagBindings	✔	✔		✔
datastream.streams.pause	✔	✔
datastream.streams.resume	✔	✔
datastream.streams.setIamPolicy		✔
datastream.streams.start	✔	✔
datastream.streams.update	✔	✔
monitoring.timeSeries.list			✔
pubsub.topics.publish			✔
resourcemanager.projects.get		✔		✔
resourcemanager.projects.list		✔		✔
spanner.databases.beginReadOnlyTransaction			✔
spanner.databases.getDdl			✔
spanner.databases.partitionQuery			✔
spanner.databases.partitionRead			✔
spanner.databases.read			✔
spanner.databases.select			✔
spanner.databases.useDataBoost			✔
spanner.databases.useRoleBasedAccess			✔
spanner.sessions.create			✔
spanner.sessions.delete			✔
spanner.sessions.get			✔
storage.buckets.get			✔
storage.objects.create			✔
storage.objects.get			✔
storage.objects.list			✔