Permission	serviceAgent	admin	editor	viewer	scopeAdmin	scopeEditorProjectLevel	gatewayAdmin	scopeEditor	gatewayEditor	scopeViewer	scopeViewerProjectLevel	gatewayReader	crossProjectServiceAgent	connect
container.clusterRoleBindings.create	✔
container.clusterRoleBindings.delete	✔
container.clusterRoleBindings.get	✔
container.clusterRoleBindings.list	✔
container.clusterRoleBindings.update	✔
container.clusterRoles.bind	✔
container.clusterRoles.create	✔
container.clusterRoles.delete	✔
container.clusterRoles.escalate	✔
container.clusterRoles.get	✔
container.clusterRoles.list	✔
container.clusterRoles.update	✔
container.clusters.connect	✔
container.clusters.get	✔
container.clusters.list	✔
container.clusters.update	✔
container.customResourceDefinitions.create	✔
container.customResourceDefinitions.delete	✔
container.customResourceDefinitions.get	✔
container.customResourceDefinitions.list	✔
container.customResourceDefinitions.update	✔
container.namespaces.get	✔
container.operations.get	✔
container.thirdPartyObjects.create	✔
container.thirdPartyObjects.delete	✔
container.thirdPartyObjects.get	✔
container.thirdPartyObjects.list	✔
container.thirdPartyObjects.update	✔
gkehub.endpoints.connect														✔
gkehub.features.create	✔	✔	✔
gkehub.features.delete		✔	✔
gkehub.features.get	✔	✔	✔	✔
gkehub.features.getIamPolicy		✔	✔	✔
gkehub.features.list	✔	✔	✔	✔
gkehub.features.setIamPolicy		✔
gkehub.features.update		✔	✔
gkehub.fleet.create	✔	✔	✔
gkehub.fleet.createFreeTrial		✔	✔
gkehub.fleet.delete		✔	✔
gkehub.fleet.get	✔	✔	✔	✔
gkehub.fleet.getFreeTrial		✔	✔	✔
gkehub.fleet.update		✔	✔
gkehub.fleet.updateFreeTrial		✔	✔
gkehub.gateway.delete	✔					✔	✔		✔
gkehub.gateway.generateCredentials	✔					✔	✔		✔		✔	✔
gkehub.gateway.get	✔					✔	✔		✔		✔	✔
gkehub.gateway.patch	✔					✔	✔		✔
gkehub.gateway.post	✔					✔	✔		✔
gkehub.gateway.put	✔					✔	✔		✔
gkehub.gateway.stream							✔
gkehub.locations.get	✔	✔	✔	✔
gkehub.locations.list	✔	✔	✔	✔
gkehub.membershipbindings.create		✔	✔
gkehub.membershipbindings.delete		✔	✔
gkehub.membershipbindings.get		✔	✔	✔
gkehub.membershipbindings.list		✔	✔	✔
gkehub.membershipbindings.update		✔	✔
gkehub.memberships.create	✔	✔	✔
gkehub.memberships.delete		✔	✔
gkehub.memberships.generateConnectManifest	✔	✔	✔	✔
gkehub.memberships.get	✔	✔	✔	✔		✔	✔		✔		✔	✔
gkehub.memberships.getIamPolicy		✔	✔	✔
gkehub.memberships.list	✔	✔	✔	✔
gkehub.memberships.setIamPolicy		✔
gkehub.memberships.update		✔	✔
gkehub.namespaces.create		✔	✔		✔			✔
gkehub.namespaces.delete		✔	✔		✔			✔
gkehub.namespaces.get		✔	✔	✔	✔			✔		✔
gkehub.namespaces.list		✔	✔	✔	✔			✔		✔
gkehub.namespaces.update		✔	✔
gkehub.operations.cancel		✔	✔
gkehub.operations.delete		✔	✔
gkehub.operations.get	✔	✔	✔	✔		✔
gkehub.operations.list		✔	✔	✔
gkehub.rbacrolebindings.create		✔	✔		✔
gkehub.rbacrolebindings.delete		✔	✔		✔
gkehub.rbacrolebindings.get		✔	✔	✔	✔			✔		✔
gkehub.rbacrolebindings.list		✔	✔	✔	✔			✔		✔
gkehub.rbacrolebindings.update		✔	✔		✔
gkehub.scopes.create		✔	✔
gkehub.scopes.delete		✔	✔
gkehub.scopes.get		✔	✔	✔	✔			✔		✔
gkehub.scopes.getIamPolicy		✔	✔		✔			✔		✔
gkehub.scopes.list		✔	✔	✔
gkehub.scopes.listBoundMemberships		✔	✔	✔	✔			✔		✔
gkehub.scopes.setIamPolicy		✔			✔
gkehub.scopes.update		✔	✔
gkemulticloud.awsClusters.get	✔
gkemulticloud.azureClusters.get	✔
gkeonprem.bareMetalClusters.get	✔
gkeonprem.vmwareClusters.get	✔
logging.buckets.create	✔
logging.buckets.get	✔
logging.buckets.list	✔
logging.buckets.update	✔
logging.exclusions.create	✔
logging.exclusions.delete	✔
logging.exclusions.get	✔
logging.exclusions.list	✔
logging.exclusions.update	✔
logging.sinks.create	✔
logging.sinks.delete	✔
logging.sinks.get	✔
logging.sinks.list	✔
logging.sinks.update	✔
logging.views.create	✔
logging.views.get	✔
logging.views.list	✔
logging.views.update	✔
monitoring.metricsScopes.link	✔
monitoring.timeSeries.list						✔					✔
resourcemanager.projects.get	✔	✔	✔	✔		✔					✔
resourcemanager.projects.getIamPolicy													✔
resourcemanager.projects.list	✔	✔	✔	✔		✔					✔
resourcemanager.projects.setIamPolicy													✔
serviceusage.services.get	✔					✔	✔		✔		✔	✔
serviceusage.services.list	✔