Permission	hubAdmin	serviceAgent	spokeAdmin	hubViewer	serviceProducerAdmin	consumerNetworkAdmin	regionalEndpointAdmin	serviceClassUser	regionalEndpointViewer	groupUser
compute.addresses.create		✔
compute.addresses.createInternal		✔
compute.addresses.delete		✔
compute.addresses.deleteInternal		✔
compute.addresses.get		✔
compute.addresses.setLabels		✔
compute.addresses.use		✔
compute.forwardingRules.create		✔
compute.forwardingRules.delete		✔
compute.forwardingRules.get		✔
compute.forwardingRules.pscCreate		✔
compute.forwardingRules.pscDelete		✔
compute.forwardingRules.pscSetLabels		✔
compute.forwardingRules.pscSetTarget		✔
compute.forwardingRules.pscUpdate		✔
compute.forwardingRules.setLabels		✔
compute.instances.get		✔
compute.interconnectAttachments.get		✔
compute.networks.get		✔
compute.networks.use		✔
compute.projects.get		✔
compute.regionOperations.get		✔
compute.routers.get		✔
compute.subnetworks.get		✔
compute.subnetworks.getIamPolicy		✔
compute.subnetworks.list		✔
compute.subnetworks.setIamPolicy		✔
compute.subnetworks.use		✔
compute.vpnTunnels.get		✔
dns.managedZones.create		✔
dns.networks.bindPrivateDNSZone		✔
networkconnectivity.groups.acceptSpoke	✔
networkconnectivity.groups.get	✔			✔
networkconnectivity.groups.getIamPolicy	✔			✔
networkconnectivity.groups.list	✔			✔
networkconnectivity.groups.rejectSpoke	✔
networkconnectivity.groups.setIamPolicy	✔
networkconnectivity.groups.use	✔									✔
networkconnectivity.hubRouteTables.get	✔		✔	✔
networkconnectivity.hubRouteTables.getIamPolicy	✔		✔	✔
networkconnectivity.hubRouteTables.list	✔		✔	✔
networkconnectivity.hubRouteTables.setIamPolicy	✔
networkconnectivity.hubRoutes.get	✔		✔	✔
networkconnectivity.hubRoutes.getIamPolicy	✔		✔	✔
networkconnectivity.hubRoutes.list	✔		✔	✔
networkconnectivity.hubRoutes.setIamPolicy	✔
networkconnectivity.hubs.create	✔
networkconnectivity.hubs.delete	✔
networkconnectivity.hubs.get	✔		✔	✔
networkconnectivity.hubs.getIamPolicy	✔		✔	✔
networkconnectivity.hubs.list	✔		✔	✔
networkconnectivity.hubs.listSpokes	✔			✔
networkconnectivity.hubs.setIamPolicy	✔
networkconnectivity.hubs.update	✔
networkconnectivity.locations.get	✔		✔	✔
networkconnectivity.locations.list	✔		✔	✔
networkconnectivity.operations.cancel	✔
networkconnectivity.operations.delete	✔
networkconnectivity.operations.get	✔	✔	✔		✔
networkconnectivity.operations.list	✔		✔		✔
networkconnectivity.regionalEndpoints.create							✔
networkconnectivity.regionalEndpoints.delete							✔
networkconnectivity.regionalEndpoints.get							✔		✔
networkconnectivity.regionalEndpoints.list							✔		✔
networkconnectivity.serviceClasses.create					✔
networkconnectivity.serviceClasses.delete					✔
networkconnectivity.serviceClasses.get					✔			✔
networkconnectivity.serviceClasses.list					✔			✔
networkconnectivity.serviceClasses.update					✔
networkconnectivity.serviceClasses.use					✔			✔
networkconnectivity.serviceConnectionMaps.create					✔
networkconnectivity.serviceConnectionMaps.delete					✔
networkconnectivity.serviceConnectionMaps.get					✔
networkconnectivity.serviceConnectionMaps.list					✔
networkconnectivity.serviceConnectionMaps.update					✔
networkconnectivity.serviceConnectionPolicies.create						✔
networkconnectivity.serviceConnectionPolicies.delete						✔
networkconnectivity.serviceConnectionPolicies.get						✔
networkconnectivity.serviceConnectionPolicies.list						✔
networkconnectivity.serviceConnectionPolicies.update						✔
networkconnectivity.spokes.create	✔		✔
networkconnectivity.spokes.delete	✔		✔
networkconnectivity.spokes.get	✔		✔	✔
networkconnectivity.spokes.getIamPolicy	✔		✔	✔
networkconnectivity.spokes.list	✔		✔	✔
networkconnectivity.spokes.setIamPolicy	✔		✔
networkconnectivity.spokes.update	✔		✔
resourcemanager.projects.get	✔		✔	✔	✔	✔	✔	✔	✔
resourcemanager.projects.list	✔		✔	✔	✔	✔	✔	✔	✔
servicedirectory.namespaces.associatePrivateZone		✔
servicedirectory.namespaces.create		✔
servicedirectory.namespaces.delete		✔
servicedirectory.services.create		✔
servicedirectory.services.delete		✔