Permission	clusterServiceAgent	admin	serviceAgent	viewer	machineUser	offlineCredentialUser
cloudnotifications.activities.list	✔
compute.externalVpnGateways.create			✔
compute.externalVpnGateways.delete			✔
compute.externalVpnGateways.get			✔
compute.externalVpnGateways.use			✔
compute.globalOperations.get			✔
compute.networks.get			✔
compute.networks.updatePolicy			✔
compute.regionOperations.get			✔
compute.routers.create			✔
compute.routers.delete			✔
compute.routers.get			✔
compute.routers.list			✔
compute.routers.update			✔
compute.routers.use			✔
compute.vpnGateways.create			✔
compute.vpnGateways.delete			✔
compute.vpnGateways.get			✔
compute.vpnGateways.use			✔
compute.vpnTunnels.create			✔
compute.vpnTunnels.delete			✔
compute.vpnTunnels.get			✔
edgecontainer.clusters.create		✔
edgecontainer.clusters.delete		✔
edgecontainer.clusters.generateAccessToken		✔		✔
edgecontainer.clusters.generateOfflineCredential		✔				✔
edgecontainer.clusters.get		✔		✔
edgecontainer.clusters.getIamPolicy		✔		✔
edgecontainer.clusters.list		✔		✔
edgecontainer.clusters.setIamPolicy		✔
edgecontainer.clusters.update		✔
edgecontainer.clusters.upgrade		✔
edgecontainer.locations.get		✔		✔
edgecontainer.locations.list		✔		✔
edgecontainer.machines.create		✔
edgecontainer.machines.delete		✔
edgecontainer.machines.get		✔		✔	✔
edgecontainer.machines.getIamPolicy		✔		✔	✔
edgecontainer.machines.list		✔		✔	✔
edgecontainer.machines.setIamPolicy		✔
edgecontainer.machines.update		✔
edgecontainer.machines.use		✔			✔
edgecontainer.nodePools.create		✔
edgecontainer.nodePools.delete		✔
edgecontainer.nodePools.get		✔		✔
edgecontainer.nodePools.getIamPolicy		✔		✔
edgecontainer.nodePools.list		✔		✔
edgecontainer.nodePools.setIamPolicy		✔
edgecontainer.nodePools.update		✔
edgecontainer.operations.cancel		✔
edgecontainer.operations.delete		✔
edgecontainer.operations.get		✔		✔
edgecontainer.operations.list		✔		✔
edgecontainer.serverconfig.get		✔		✔
edgecontainer.vpnConnections.create		✔
edgecontainer.vpnConnections.delete		✔
edgecontainer.vpnConnections.get		✔		✔
edgecontainer.vpnConnections.getIamPolicy		✔		✔
edgecontainer.vpnConnections.list		✔		✔
edgecontainer.vpnConnections.setIamPolicy		✔
edgecontainer.vpnConnections.update		✔
gkehub.endpoints.connect	✔
gkehub.features.create	✔
gkehub.features.get	✔
gkehub.features.list	✔
gkehub.features.update	✔
gkehub.fleet.create	✔
gkehub.fleet.delete	✔
gkehub.fleet.get	✔
gkehub.locations.get	✔
gkehub.locations.list	✔
gkehub.memberships.create	✔		✔
gkehub.memberships.delete	✔		✔
gkehub.memberships.generateConnectManifest	✔		✔
gkehub.memberships.get	✔		✔
gkehub.memberships.list	✔		✔
gkehub.memberships.update	✔		✔
gkehub.operations.cancel	✔		✔
gkehub.operations.delete	✔
gkehub.operations.get	✔		✔
gkehub.operations.list	✔
kubernetesmetadata.metadata.config	✔
kubernetesmetadata.metadata.publish	✔
kubernetesmetadata.metadata.snapshot	✔
logging.logEntries.create	✔
monitoring.alertPolicies.get	✔
monitoring.alertPolicies.list	✔
monitoring.dashboards.create	✔
monitoring.dashboards.delete	✔
monitoring.dashboards.get	✔
monitoring.dashboards.list	✔
monitoring.dashboards.update	✔
monitoring.groups.get	✔
monitoring.groups.list	✔
monitoring.metricDescriptors.create	✔
monitoring.metricDescriptors.get	✔
monitoring.metricDescriptors.list	✔
monitoring.monitoredResourceDescriptors.get	✔
monitoring.monitoredResourceDescriptors.list	✔
monitoring.notificationChannelDescriptors.get	✔
monitoring.notificationChannelDescriptors.list	✔
monitoring.notificationChannels.get	✔
monitoring.notificationChannels.list	✔
monitoring.services.get	✔
monitoring.services.list	✔
monitoring.slos.get	✔
monitoring.slos.list	✔
monitoring.snoozes.get	✔
monitoring.snoozes.list	✔
monitoring.timeSeries.create	✔
monitoring.timeSeries.list	✔
monitoring.uptimeCheckConfigs.get	✔
monitoring.uptimeCheckConfigs.list	✔
opsconfigmonitoring.resourceMetadata.list	✔
opsconfigmonitoring.resourceMetadata.write	✔
resourcemanager.projects.get	✔	✔		✔	✔	✔
resourcemanager.projects.list	✔	✔		✔	✔	✔
serviceusage.quotas.get	✔
serviceusage.services.enable	✔
serviceusage.services.get	✔
serviceusage.services.list	✔		✔
stackdriver.projects.get	✔
stackdriver.resourceMetadata.list	✔
stackdriver.resourceMetadata.write	✔
storage.buckets.create	✔
storage.buckets.get	✔
storage.buckets.list	✔
storage.buckets.update	✔
storage.objects.create	✔
storage.objects.delete	✔
storage.objects.get	✔
storage.objects.list	✔
storage.objects.update	✔