Permission	bqdwProjectRemediator	serviceAgent	overwatchAdmin	overwatchViewer	overwatchActivator	bqdwOrgRemediator
accesscontextmanager.servicePerimeters.get						✔
accesscontextmanager.servicePerimeters.list						✔
accesscontextmanager.servicePerimeters.update						✔
bigquery.datasets.get	✔
bigquery.datasets.getIamPolicy	✔
bigquery.datasets.setIamPolicy	✔
bigquery.datasets.update	✔
cloudasset.assets.exportOrgPolicy		✔
cloudasset.assets.exportResource		✔
cloudasset.feeds.create		✔
cloudasset.feeds.delete		✔
cloudasset.feeds.update		✔
cloudkms.cryptoKeys.get	✔
cloudkms.cryptoKeys.getIamPolicy	✔
cloudkms.cryptoKeys.list	✔
cloudkms.cryptoKeys.setIamPolicy	✔
cloudkms.cryptoKeys.update	✔
cloudkms.keyRings.getIamPolicy	✔
cloudkms.keyRings.setIamPolicy	✔
logging.logEntries.list		✔
pubsub.subscriptions.consume		✔
pubsub.subscriptions.create		✔
pubsub.subscriptions.delete		✔
pubsub.topics.attachSubscription		✔
pubsub.topics.create		✔
pubsub.topics.delete		✔
pubsub.topics.detachSubscription		✔
pubsub.topics.get	✔
pubsub.topics.getIamPolicy	✔	✔
pubsub.topics.list	✔
pubsub.topics.setIamPolicy	✔	✔
pubsub.topics.update	✔
resourcemanager.projects.get		✔	✔	✔	✔
resourcemanager.projects.list			✔	✔	✔
resourcemanager.projects.update	✔
securedlandingzone.operations.get			✔	✔
securedlandingzone.overwatches.activate			✔		✔
securedlandingzone.overwatches.create			✔
securedlandingzone.overwatches.delete			✔
securedlandingzone.overwatches.get			✔	✔
securedlandingzone.overwatches.list			✔	✔
securedlandingzone.overwatches.suspend			✔		✔
securedlandingzone.overwatches.update			✔
securitycenter.assetsecuritymarks.update		✔
securitycenter.findings.list		✔
securitycenter.findings.update		✔
securitycenter.sources.list		✔
securitycenter.sources.update		✔
serviceusage.services.use	✔	✔
storage.buckets.get	✔
storage.buckets.getIamPolicy	✔
storage.buckets.list	✔
storage.buckets.setIamPolicy	✔
storage.buckets.update	✔