Permission	serviceAgent	admin	editor	domainAdmin	viewer	backupAdmin	peeringAdmin	backupViewer	peeringViewer	domainJoin
compute.globalOperations.get	✔
compute.networks.addPeering	✔
compute.networks.get	✔
compute.networks.removePeering	✔
compute.networks.update	✔
compute.routes.list	✔
dns.changes.create	✔
dns.changes.get	✔
dns.changes.list	✔
dns.dnsKeys.get	✔
dns.dnsKeys.list	✔
dns.managedZoneOperations.get	✔
dns.managedZoneOperations.list	✔
dns.managedZones.create	✔
dns.managedZones.delete	✔
dns.managedZones.get	✔
dns.managedZones.list	✔
dns.managedZones.update	✔
dns.networks.bindPrivateDNSPolicy	✔
dns.networks.bindPrivateDNSZone	✔
dns.policies.create	✔
dns.policies.delete	✔
dns.policies.get	✔
dns.policies.list	✔
dns.policies.update	✔
dns.projects.get	✔
dns.resourceRecordSets.create	✔
dns.resourceRecordSets.delete	✔
dns.resourceRecordSets.get	✔
dns.resourceRecordSets.list	✔
dns.resourceRecordSets.update	✔
dns.responsePolicies.create	✔
dns.responsePolicies.delete	✔
dns.responsePolicies.get	✔
dns.responsePolicies.list	✔
dns.responsePolicies.update	✔
dns.responsePolicyRules.create	✔
dns.responsePolicyRules.delete	✔
dns.responsePolicyRules.get	✔
dns.responsePolicyRules.list	✔
dns.responsePolicyRules.update	✔
managedidentities.backups.create		✔	✔	✔		✔
managedidentities.backups.delete		✔	✔	✔		✔
managedidentities.backups.get		✔	✔	✔	✔	✔		✔
managedidentities.backups.getIamPolicy		✔	✔	✔	✔	✔		✔
managedidentities.backups.list		✔	✔	✔	✔	✔		✔
managedidentities.backups.setIamPolicy		✔		✔		✔
managedidentities.backups.update		✔	✔	✔		✔
managedidentities.domains.attachTrust		✔	✔	✔
managedidentities.domains.checkMigrationPermission		✔	✔	✔
managedidentities.domains.create		✔	✔
managedidentities.domains.createTagBinding		✔		✔
managedidentities.domains.delete		✔	✔	✔
managedidentities.domains.deleteTagBinding		✔		✔
managedidentities.domains.detachTrust		✔	✔	✔
managedidentities.domains.disableMigration		✔	✔	✔
managedidentities.domains.domainJoinMachine		✔	✔	✔						✔
managedidentities.domains.enableMigration		✔	✔	✔
managedidentities.domains.extendSchema		✔	✔	✔
managedidentities.domains.get		✔	✔	✔	✔	✔		✔		✔
managedidentities.domains.getIamPolicy		✔	✔	✔	✔
managedidentities.domains.list		✔	✔		✔
managedidentities.domains.listEffectiveTags		✔	✔	✔	✔
managedidentities.domains.listTagBindings		✔	✔	✔	✔
managedidentities.domains.reconfigureTrust		✔	✔	✔
managedidentities.domains.resetpassword		✔	✔	✔
managedidentities.domains.restore		✔	✔	✔
managedidentities.domains.setIamPolicy		✔
managedidentities.domains.update		✔	✔	✔
managedidentities.domains.updateLDAPSSettings		✔	✔	✔
managedidentities.domains.validateTrust		✔	✔	✔
managedidentities.locations.get		✔	✔	✔	✔	✔	✔	✔	✔
managedidentities.locations.list		✔	✔	✔	✔	✔	✔	✔	✔
managedidentities.operations.cancel		✔	✔			✔	✔
managedidentities.operations.delete		✔	✔			✔	✔
managedidentities.operations.get		✔	✔	✔	✔	✔	✔	✔	✔
managedidentities.operations.list		✔	✔	✔	✔	✔	✔	✔	✔
managedidentities.peerings.create		✔	✔				✔
managedidentities.peerings.delete		✔	✔				✔
managedidentities.peerings.get		✔	✔		✔		✔		✔
managedidentities.peerings.getIamPolicy		✔	✔		✔		✔		✔
managedidentities.peerings.list		✔	✔		✔		✔		✔
managedidentities.peerings.setIamPolicy		✔					✔
managedidentities.peerings.update		✔	✔				✔
managedidentities.sqlintegrations.get		✔	✔	✔	✔
managedidentities.sqlintegrations.list		✔	✔	✔	✔
monitoring.metricDescriptors.create	✔
monitoring.metricDescriptors.get	✔
monitoring.metricDescriptors.list	✔
monitoring.monitoredResourceDescriptors.get	✔
monitoring.monitoredResourceDescriptors.list	✔
monitoring.timeSeries.create	✔
resourcemanager.projects.get	✔	✔	✔	✔	✔	✔	✔	✔	✔
resourcemanager.projects.list	✔	✔	✔	✔	✔	✔	✔	✔	✔
telemetry.metrics.write	✔