Permission	admin	editor	viewer	subscriber	publisher	serviceAgent
iam.serviceAccounts.getOpenIdToken						✔
pubsub.snapshots.create	✔	✔
pubsub.snapshots.delete	✔	✔
pubsub.snapshots.get	✔	✔	✔
pubsub.snapshots.getIamPolicy	✔
pubsub.snapshots.list	✔	✔	✔
pubsub.snapshots.seek	✔	✔		✔
pubsub.snapshots.setIamPolicy	✔
pubsub.snapshots.update	✔	✔
pubsub.subscriptions.consume	✔	✔		✔
pubsub.subscriptions.create	✔	✔
pubsub.subscriptions.delete	✔	✔
pubsub.subscriptions.get	✔	✔	✔
pubsub.subscriptions.getIamPolicy	✔
pubsub.subscriptions.list	✔	✔	✔
pubsub.subscriptions.setIamPolicy	✔
pubsub.subscriptions.update	✔	✔
pubsub.topics.attachSubscription	✔	✔		✔
pubsub.topics.create	✔	✔
pubsub.topics.delete	✔	✔
pubsub.topics.detachSubscription	✔	✔
pubsub.topics.get	✔	✔	✔
pubsub.topics.getIamPolicy	✔
pubsub.topics.list	✔	✔	✔
pubsub.topics.publish	✔	✔			✔
pubsub.topics.setIamPolicy	✔
pubsub.topics.update	✔	✔
pubsub.topics.updateTag	✔	✔
resourcemanager.projects.get	✔	✔	✔
serviceusage.quotas.get	✔	✔	✔
serviceusage.services.get	✔	✔	✔
serviceusage.services.list	✔	✔	✔