Permission	admin	editor	viewer	serviceAgent	organizationServiceAgent	projectServiceAgent	settingsAdmin	folderServiceAgent	settingsViewer
iam.roles.get				✔	✔	✔
privilegedaccessmanager.entitlements.create	✔
privilegedaccessmanager.entitlements.delete	✔
privilegedaccessmanager.entitlements.get	✔	✔	✔
privilegedaccessmanager.entitlements.list	✔	✔	✔
privilegedaccessmanager.entitlements.setIamPolicy	✔
privilegedaccessmanager.entitlements.update	✔
privilegedaccessmanager.grants.get	✔	✔	✔
privilegedaccessmanager.grants.list	✔	✔	✔
privilegedaccessmanager.grants.revoke	✔
privilegedaccessmanager.locations.checkOnboardingStatus	✔
privilegedaccessmanager.locations.get	✔	✔	✔
privilegedaccessmanager.locations.list	✔	✔	✔
privilegedaccessmanager.operations.delete	✔
privilegedaccessmanager.operations.get	✔	✔	✔				✔
privilegedaccessmanager.operations.list	✔	✔	✔
privilegedaccessmanager.settings.fetchEffective	✔	✔	✔				✔		✔
privilegedaccessmanager.settings.get	✔	✔	✔				✔		✔
privilegedaccessmanager.settings.update							✔
resourcemanager.folders.get				✔				✔
resourcemanager.folders.getIamPolicy				✔				✔
resourcemanager.folders.setIamPolicy				✔				✔
resourcemanager.organizations.get				✔	✔
resourcemanager.organizations.getIamPolicy				✔	✔
resourcemanager.organizations.setIamPolicy				✔	✔
resourcemanager.projects.get	✔	✔	✔	✔		✔
resourcemanager.projects.getIamPolicy				✔		✔
resourcemanager.projects.list		✔
resourcemanager.projects.setIamPolicy				✔		✔