Permission	serviceAgent	migrationAdmin	admin	editor	metadataOperator	metadataOwner	user	metadataEditor	metadataViewer	metadataUser	federationAccessor	metadataMutateAdmin	metadataQueryAdmin
cloudsql.instances.connect		✔
cloudsql.instances.get		✔
cloudsql.instances.login		✔
compute.addresses.createInternal	✔
compute.addresses.deleteInternal	✔
compute.addresses.get	✔
compute.addresses.use	✔
compute.autoscalers.create		✔
compute.autoscalers.delete		✔
compute.disks.create		✔
compute.disks.delete		✔
compute.forwardingRules.create	✔	✔
compute.forwardingRules.delete	✔	✔
compute.forwardingRules.get	✔
compute.forwardingRules.pscCreate	✔
compute.forwardingRules.pscDelete	✔
compute.forwardingRules.use		✔
compute.globalAddresses.createInternal	✔
compute.globalAddresses.deleteInternal	✔
compute.globalAddresses.get	✔
compute.globalAddresses.list	✔
compute.globalOperations.get	✔
compute.globalOperations.list	✔
compute.instanceGroupManagers.create		✔
compute.instanceGroupManagers.delete		✔
compute.instanceGroupManagers.use		✔
compute.instanceGroups.delete		✔
compute.instanceGroups.use		✔
compute.instanceTemplates.create		✔
compute.instanceTemplates.delete		✔
compute.instanceTemplates.get		✔
compute.instanceTemplates.useReadOnly		✔
compute.instances.create		✔
compute.instances.delete		✔
compute.instances.get		✔
compute.instances.setMetadata		✔
compute.machineTypes.list		✔
compute.networks.addPeering	✔
compute.networks.get	✔
compute.networks.removePeering	✔
compute.networks.updatePeering	✔
compute.networks.use	✔
compute.regionBackendServices.create		✔
compute.regionBackendServices.delete		✔
compute.regionBackendServices.use		✔
compute.regionHealthChecks.create		✔
compute.regionHealthChecks.delete		✔
compute.regionHealthChecks.use		✔
compute.regionHealthChecks.useReadOnly		✔
compute.regionOperations.get	✔
compute.serviceAttachments.create		✔
compute.serviceAttachments.delete		✔
compute.subnetworks.get	✔	✔
compute.subnetworks.use	✔	✔
compute.zones.list		✔
datastream.connectionProfiles.create		✔
datastream.connectionProfiles.delete		✔
datastream.objects.get		✔
datastream.objects.list		✔
datastream.objects.startBackfillJob		✔
datastream.objects.stopBackfillJob		✔
datastream.operations.get		✔
datastream.privateConnections.create		✔
datastream.privateConnections.delete		✔
datastream.streams.create		✔
datastream.streams.delete		✔
datastream.streams.get		✔
datastream.streams.update		✔
dns.changes.create	✔
dns.changes.get	✔
dns.managedZones.create	✔
dns.managedZones.delete	✔
dns.managedZones.get	✔
dns.managedZones.list	✔
dns.networks.bindPrivateDNSZone	✔
dns.networks.targetWithPeeringZone	✔
dns.resourceRecordSets.create	✔
dns.resourceRecordSets.delete	✔
dns.resourceRecordSets.get	✔
dns.resourceRecordSets.list	✔
dns.resourceRecordSets.update	✔
metastore.backups.create			✔	✔	✔
metastore.backups.delete			✔	✔	✔
metastore.backups.get			✔	✔	✔		✔
metastore.backups.getIamPolicy			✔
metastore.backups.list			✔	✔	✔		✔
metastore.backups.setIamPolicy			✔
metastore.backups.use			✔	✔	✔
metastore.databases.create						✔		✔
metastore.databases.delete						✔		✔
metastore.databases.get	✔					✔		✔	✔	✔
metastore.databases.getIamPolicy						✔		✔	✔
metastore.databases.list						✔		✔	✔	✔
metastore.databases.setIamPolicy	✔					✔
metastore.databases.update	✔					✔		✔
metastore.federations.create			✔	✔
metastore.federations.delete			✔	✔
metastore.federations.get			✔	✔			✔
metastore.federations.getIamPolicy			✔				✔
metastore.federations.list			✔	✔			✔
metastore.federations.setIamPolicy			✔
metastore.federations.update			✔	✔
metastore.federations.use	✔		✔								✔
metastore.imports.create			✔	✔	✔
metastore.imports.get			✔	✔	✔		✔
metastore.imports.list			✔	✔	✔		✔
metastore.imports.update			✔	✔	✔
metastore.locations.get			✔	✔	✔		✔
metastore.locations.list			✔	✔	✔		✔
metastore.migrations.cancel			✔	✔
metastore.migrations.complete			✔	✔
metastore.migrations.delete			✔	✔
metastore.migrations.get			✔	✔
metastore.migrations.list			✔	✔
metastore.migrations.start			✔	✔
metastore.operations.cancel			✔	✔
metastore.operations.delete			✔	✔
metastore.operations.get			✔	✔	✔		✔
metastore.operations.list			✔	✔	✔		✔
metastore.services.create			✔	✔
metastore.services.delete			✔	✔
metastore.services.export			✔	✔	✔		✔
metastore.services.get	✔		✔	✔	✔	✔	✔	✔	✔	✔
metastore.services.getIamPolicy			✔	✔	✔	✔	✔
metastore.services.list			✔	✔	✔	✔	✔
metastore.services.mutateMetadata												✔
metastore.services.queryMetadata													✔
metastore.services.restore			✔	✔	✔
metastore.services.setIamPolicy			✔
metastore.services.update			✔	✔
metastore.services.use						✔		✔	✔	✔
metastore.tables.create						✔		✔
metastore.tables.delete						✔		✔
metastore.tables.get	✔					✔		✔	✔
metastore.tables.getIamPolicy						✔		✔	✔
metastore.tables.list						✔		✔	✔
metastore.tables.setIamPolicy	✔					✔
metastore.tables.update	✔					✔		✔
resourcemanager.projects.get			✔	✔	✔		✔
resourcemanager.projects.list			✔	✔	✔		✔
servicedirectory.namespaces.create	✔
servicedirectory.namespaces.delete	✔
servicedirectory.services.create	✔
servicedirectory.services.delete	✔
storage.buckets.create	✔
storage.buckets.delete	✔
storage.buckets.get	✔
storage.buckets.update	✔
storage.objects.create	✔
storage.objects.delete	✔
storage.objects.get	✔
storage.objects.list	✔
storage.objects.update	✔