Permission	serviceAgent	admin	viewer	invoker
artifactregistry.files.get	✔
artifactregistry.files.list	✔
artifactregistry.packages.get	✔
artifactregistry.packages.list	✔
artifactregistry.repositories.downloadArtifacts	✔
artifactregistry.repositories.get	✔
artifactregistry.repositories.list	✔
artifactregistry.tags.get	✔
artifactregistry.tags.list	✔
artifactregistry.versions.get	✔
artifactregistry.versions.list	✔
clientauthconfig.clients.list	✔
cloudbuild.builds.create	✔
cloudbuild.builds.get	✔
compute.globalOperations.get	✔
compute.networks.access	✔
iam.serviceAccounts.actAs	✔
iam.serviceAccounts.getAccessToken	✔
iam.serviceAccounts.getOpenIdToken	✔
iam.serviceAccounts.signBlob	✔
pubsub.subscriptions.create	✔
pubsub.subscriptions.delete	✔
pubsub.subscriptions.get	✔
pubsub.subscriptions.list	✔
pubsub.topics.attachSubscription	✔
pubsub.topics.create	✔
pubsub.topics.delete	✔
pubsub.topics.get	✔
pubsub.topics.list	✔
pubsub.topics.publish	✔
resourcemanager.projects.get	✔	✔	✔
resourcemanager.projects.getIamPolicy	✔
resourcemanager.projects.list	✔	✔	✔
run.configurations.get		✔	✔
run.configurations.list		✔	✔
run.locations.list		✔	✔
run.revisions.delete		✔
run.revisions.get		✔	✔
run.revisions.list		✔	✔
run.routes.get		✔	✔
run.routes.invoke	✔	✔		✔
run.routes.list		✔	✔
run.services.create		✔
run.services.delete		✔
run.services.get		✔	✔
run.services.getIamPolicy		✔	✔
run.services.list		✔	✔
run.services.setIamPolicy		✔
run.services.update		✔
serviceusage.services.use	✔
storage.objects.get	✔
storage.objects.list	✔
vpcaccess.connectors.get	✔
vpcaccess.connectors.use	✔