Permission	serviceAgent	patchDeploymentAdmin	guestPolicyAdmin	guestPolicyEditor	patchJobExecutor	guestPolicyViewer	patchDeploymentViewer	patchJobViewer
compute.instances.get	✔
compute.instances.getGuestAttributes	✔
compute.instances.list	✔
compute.instances.setMetadata	✔
compute.zones.get	✔
compute.zones.list	✔
containeranalysis.notes.attachOccurrence	✔
containeranalysis.notes.create	✔
containeranalysis.notes.delete	✔
containeranalysis.notes.get	✔
containeranalysis.notes.list	✔
containeranalysis.notes.update	✔
containeranalysis.occurrences.create	✔
containeranalysis.occurrences.delete	✔
containeranalysis.occurrences.get	✔
containeranalysis.occurrences.list	✔
containeranalysis.occurrences.update	✔
iam.serviceAccounts.actAs	✔
osconfig.guestPolicies.create			✔
osconfig.guestPolicies.delete			✔
osconfig.guestPolicies.get			✔	✔		✔
osconfig.guestPolicies.list			✔	✔		✔
osconfig.guestPolicies.update			✔	✔
osconfig.patchDeployments.create		✔
osconfig.patchDeployments.delete		✔
osconfig.patchDeployments.execute		✔
osconfig.patchDeployments.get		✔					✔
osconfig.patchDeployments.list		✔					✔
osconfig.patchDeployments.update		✔
osconfig.patchJobs.exec					✔
osconfig.patchJobs.get					✔			✔
osconfig.patchJobs.list					✔			✔
resourcemanager.projects.get	✔	✔	✔	✔	✔	✔	✔	✔
resourcemanager.projects.list	✔	✔	✔	✔	✔	✔	✔	✔