Permission	admin	viewer	serviceAgent	patchDeploymentAdmin	osPolicyAssignmentAdmin	policyOrchestratorAdmin	guestPolicyAdmin	osPolicyAssignmentEditor	upgradeReportViewer	guestPolicyEditor	osPolicyAssignmentReportViewer	osPolicyAssignmentViewer	patchJobExecutor	policyOrchestratorViewer	guestPolicyViewer	instanceOSPoliciesComplianceViewer	inventoryViewer	patchDeploymentViewer	patchJobViewer	projectFeatureSettingsEditor	rolloutServiceAgent	vulnerabilityReportViewer	projectFeatureSettingsViewer
cloudasset.assets.listOSConfigOSPolicyAssignments			✔
cloudasset.assets.listPatchDeployments			✔
compute.globalOperations.get			✔
compute.instances.get			✔
compute.instances.getGuestAttributes			✔
compute.instances.list			✔
compute.instances.setMetadata			✔
compute.projects.get			✔
compute.projects.setCommonInstanceMetadata			✔
compute.zones.get			✔
compute.zones.list			✔
containeranalysis.notes.attachOccurrence			✔
containeranalysis.notes.create			✔
containeranalysis.notes.delete			✔
containeranalysis.notes.get			✔
containeranalysis.notes.list			✔
containeranalysis.notes.update			✔
containeranalysis.occurrences.create			✔
containeranalysis.occurrences.delete			✔
containeranalysis.occurrences.get			✔
containeranalysis.occurrences.list			✔
containeranalysis.occurrences.update			✔
iam.serviceAccounts.actAs			✔
osconfig.guestPolicies.create	✔						✔
osconfig.guestPolicies.delete	✔						✔
osconfig.guestPolicies.get	✔	✔					✔			✔					✔
osconfig.guestPolicies.list	✔	✔					✔			✔					✔
osconfig.guestPolicies.update	✔						✔			✔
osconfig.instanceOSPoliciesCompliances.get	✔	✔														✔
osconfig.instanceOSPoliciesCompliances.list	✔	✔														✔
osconfig.inventories.get	✔	✔															✔
osconfig.inventories.list	✔	✔															✔
osconfig.locations.get	✔	✔				✔								✔
osconfig.locations.list	✔	✔				✔								✔
osconfig.operations.cancel	✔
osconfig.operations.delete	✔
osconfig.operations.get	✔	✔				✔								✔							✔
osconfig.operations.list	✔	✔
osconfig.osPolicyAssignmentReports.get	✔	✔									✔
osconfig.osPolicyAssignmentReports.list	✔	✔									✔
osconfig.osPolicyAssignmentReports.searchSummaries	✔	✔									✔
osconfig.osPolicyAssignments.create	✔				✔
osconfig.osPolicyAssignments.delete	✔				✔																✔
osconfig.osPolicyAssignments.get	✔	✔			✔			✔				✔									✔
osconfig.osPolicyAssignments.list	✔	✔			✔			✔				✔
osconfig.osPolicyAssignments.searchPolicies	✔	✔			✔			✔				✔
osconfig.osPolicyAssignments.update	✔				✔			✔													✔
osconfig.patchDeployments.create	✔			✔
osconfig.patchDeployments.delete	✔			✔
osconfig.patchDeployments.execute	✔			✔
osconfig.patchDeployments.get	✔	✔		✔														✔
osconfig.patchDeployments.list	✔	✔		✔														✔
osconfig.patchDeployments.pause	✔			✔
osconfig.patchDeployments.resume	✔			✔
osconfig.patchDeployments.update	✔			✔
osconfig.patchJobs.exec	✔												✔
osconfig.patchJobs.get	✔	✔											✔						✔
osconfig.patchJobs.list	✔	✔											✔						✔
osconfig.policyOrchestrators.create	✔					✔
osconfig.policyOrchestrators.delete	✔					✔
osconfig.policyOrchestrators.get	✔	✔				✔								✔
osconfig.policyOrchestrators.list	✔	✔				✔								✔
osconfig.policyOrchestrators.update	✔					✔
osconfig.projectFeatureSettings.get	✔	✔	✔																	✔			✔
osconfig.projectFeatureSettings.update	✔		✔																	✔
osconfig.upgradeReports.get	✔	✔							✔
osconfig.upgradeReports.getSummary	✔	✔							✔
osconfig.upgradeReports.list	✔	✔							✔
osconfig.upgradeReports.searchSummaries	✔	✔							✔
osconfig.vulnerabilityReports.get	✔	✔																				✔
osconfig.vulnerabilityReports.list	✔	✔																				✔
resourcemanager.projects.get			✔	✔	✔		✔	✔	✔	✔	✔	✔	✔		✔	✔	✔	✔	✔	✔		✔	✔
resourcemanager.projects.list			✔	✔	✔		✔	✔	✔	✔	✔	✔	✔		✔	✔	✔	✔	✔	✔		✔	✔