Permission	serviceAgent	admin	developer	viewer	connectionPublisher	publisher	eventReceiver
cloudfunctions.functions.get	✔
compute.instanceGroupManagers.get	✔
compute.networkAttachments.get	✔
compute.networkAttachments.update	✔
compute.regionOperations.get	✔
container.clusters.connect	✔
container.clusters.get	✔
container.deployments.create	✔
container.deployments.delete	✔
container.deployments.get	✔
container.deployments.list	✔
container.deployments.update	✔
container.namespaces.create	✔
container.namespaces.delete	✔
container.namespaces.get	✔
container.namespaces.list	✔
container.serviceAccounts.create	✔
container.serviceAccounts.delete	✔
container.serviceAccounts.get	✔
container.serviceAccounts.list	✔
container.services.get	✔
container.services.list	✔
dns.networks.targetWithPeeringZone	✔
eventarc.channelConnections.create		✔	✔
eventarc.channelConnections.delete		✔	✔
eventarc.channelConnections.get		✔	✔	✔	✔
eventarc.channelConnections.getIamPolicy		✔	✔	✔
eventarc.channelConnections.list		✔	✔	✔	✔
eventarc.channelConnections.publish		✔	✔		✔
eventarc.channelConnections.setIamPolicy		✔
eventarc.channels.attach		✔	✔
eventarc.channels.create		✔	✔
eventarc.channels.delete		✔	✔
eventarc.channels.get		✔	✔	✔		✔
eventarc.channels.getIamPolicy		✔	✔	✔
eventarc.channels.list		✔	✔	✔		✔
eventarc.channels.publish	✔	✔	✔			✔
eventarc.channels.setIamPolicy		✔
eventarc.channels.undelete		✔	✔
eventarc.channels.update		✔	✔
eventarc.events.receiveAuditLogWritten		✔					✔
eventarc.events.receiveEvent		✔					✔
eventarc.googleChannelConfigs.get		✔	✔	✔
eventarc.googleChannelConfigs.update		✔	✔
eventarc.locations.get		✔	✔	✔
eventarc.locations.list		✔	✔	✔
eventarc.operations.cancel		✔	✔
eventarc.operations.delete		✔	✔
eventarc.operations.get	✔	✔	✔	✔
eventarc.operations.list		✔	✔	✔
eventarc.providers.get		✔	✔	✔
eventarc.providers.list		✔	✔	✔
eventarc.triggers.create		✔	✔
eventarc.triggers.delete		✔	✔
eventarc.triggers.get		✔	✔	✔
eventarc.triggers.getIamPolicy		✔	✔	✔
eventarc.triggers.list		✔	✔	✔
eventarc.triggers.setIamPolicy		✔
eventarc.triggers.undelete		✔	✔
eventarc.triggers.update		✔	✔
iam.serviceAccounts.actAs	✔
iam.serviceAccounts.getAccessToken	✔
iam.serviceAccounts.getOpenIdToken	✔
monitoring.timeSeries.create	✔
pubsub.subscriptions.consume	✔
pubsub.subscriptions.create	✔
pubsub.subscriptions.delete	✔
pubsub.subscriptions.get	✔
pubsub.subscriptions.list	✔
pubsub.subscriptions.update	✔
pubsub.topics.attachSubscription	✔
pubsub.topics.create	✔
pubsub.topics.delete	✔
pubsub.topics.get	✔
pubsub.topics.list	✔
pubsub.topics.publish	✔
pubsub.topics.update	✔
resourcemanager.projects.get		✔	✔	✔	✔	✔
resourcemanager.projects.list		✔	✔	✔	✔	✔
run.jobs.get	✔
run.services.get	✔
serviceusage.services.use	✔
storage.buckets.get	✔
storage.buckets.update	✔
workflows.workflows.get	✔