Permission	admin	reader	serviceAgent	peer
compute.globalNetworkEndpointGroups.attachNetworkEndpoints			✔
compute.globalNetworkEndpointGroups.create			✔
compute.globalNetworkEndpointGroups.delete			✔
compute.globalNetworkEndpointGroups.detachNetworkEndpoints			✔
compute.globalNetworkEndpointGroups.get			✔
compute.globalOperations.get			✔
compute.healthChecks.get			✔
compute.networks.get	✔	✔
compute.networks.list	✔
dns.changes.create	✔
dns.changes.get	✔	✔
dns.changes.list	✔	✔
dns.dnsKeys.get	✔	✔
dns.dnsKeys.list	✔	✔
dns.gkeClusters.bindDNSResponsePolicy	✔
dns.gkeClusters.bindPrivateDNSZone	✔
dns.managedZoneOperations.get	✔	✔
dns.managedZoneOperations.list	✔	✔
dns.managedZones.create	✔
dns.managedZones.delete	✔
dns.managedZones.get	✔	✔
dns.managedZones.getIamPolicy	✔
dns.managedZones.list	✔	✔
dns.managedZones.update	✔
dns.networks.bindDNSResponsePolicy	✔
dns.networks.bindPrivateDNSPolicy	✔
dns.networks.bindPrivateDNSZone	✔
dns.networks.targetWithPeeringZone	✔			✔
dns.networks.useHealthSignals	✔
dns.policies.create	✔
dns.policies.delete	✔
dns.policies.get	✔	✔
dns.policies.getIamPolicy	✔
dns.policies.list	✔	✔
dns.policies.update	✔
dns.projects.get	✔	✔
dns.resourceRecordSets.create	✔
dns.resourceRecordSets.delete	✔
dns.resourceRecordSets.get	✔	✔
dns.resourceRecordSets.list	✔	✔
dns.resourceRecordSets.update	✔
dns.responsePolicies.create	✔
dns.responsePolicies.delete	✔
dns.responsePolicies.get	✔	✔
dns.responsePolicies.list	✔	✔
dns.responsePolicies.update	✔
dns.responsePolicyRules.create	✔
dns.responsePolicyRules.delete	✔
dns.responsePolicyRules.get	✔	✔
dns.responsePolicyRules.list	✔	✔
dns.responsePolicyRules.update	✔
resourcemanager.projects.get	✔	✔
resourcemanager.projects.list	✔	✔