Permission	admin	legacyBucketOwner	folderAdmin	objectAdmin	objectUser	legacyBucketWriter	editor	expressModeUserAccess	viewer	objectCreator	hmacKeyAdmin	legacyObjectOwner	objectViewer	legacyBucketReader	annotationGeneratorService	expressModeServiceInput	insightsCollectorService	expressModeServiceOutput	bucketViewer	legacyObjectReader
cloudkms.keyHandles.create	✔
cloudkms.keyHandles.get	✔
cloudkms.keyHandles.list	✔
cloudkms.operations.get	✔
cloudkms.projects.showEffectiveAutokeyConfig	✔
firebase.projects.get	✔										✔
monitoring.timeSeries.create	✔			✔	✔
orgpolicy.policy.get	✔		✔	✔	✔			✔		✔	✔
recommender.iamPolicyInsights.get	✔
recommender.iamPolicyInsights.list	✔
recommender.iamPolicyInsights.update	✔
recommender.iamPolicyRecommendations.get	✔
recommender.iamPolicyRecommendations.list	✔
recommender.iamPolicyRecommendations.update	✔
recommender.storageBucketSoftDeleteInsights.get	✔
recommender.storageBucketSoftDeleteInsights.list	✔
recommender.storageBucketSoftDeleteInsights.update	✔
recommender.storageBucketSoftDeleteRecommendations.get	✔
recommender.storageBucketSoftDeleteRecommendations.list	✔
recommender.storageBucketSoftDeleteRecommendations.update	✔
resourcemanager.hierarchyNodes.listEffectiveTags	✔
resourcemanager.projects.get	✔		✔	✔	✔		✔		✔	✔	✔		✔				✔
resourcemanager.projects.list	✔		✔	✔	✔		✔		✔	✔	✔		✔				✔
storage.anywhereCaches.create	✔	✔
storage.anywhereCaches.disable	✔	✔
storage.anywhereCaches.get	✔	✔
storage.anywhereCaches.list	✔	✔
storage.anywhereCaches.pause	✔	✔
storage.anywhereCaches.resume	✔	✔
storage.anywhereCaches.update	✔	✔
storage.bucketOperations.cancel	✔	✔
storage.bucketOperations.get	✔	✔
storage.bucketOperations.list	✔	✔
storage.buckets.create	✔						✔
storage.buckets.createTagBinding	✔	✔
storage.buckets.delete	✔						✔
storage.buckets.deleteTagBinding	✔	✔
storage.buckets.enableObjectRetention	✔	✔
storage.buckets.get	✔	✔				✔		✔						✔			✔		✔
storage.buckets.getIamPolicy	✔	✔
storage.buckets.getIpFilter	✔	✔
storage.buckets.getObjectInsights	✔																✔
storage.buckets.list	✔						✔	✔	✔										✔
storage.buckets.listEffectiveTags	✔	✔					✔		✔
storage.buckets.listTagBindings	✔	✔					✔		✔
storage.buckets.relocate	✔	✔
storage.buckets.restore	✔	✔
storage.buckets.setIamPolicy	✔	✔
storage.buckets.setIpFilter	✔	✔
storage.buckets.update	✔	✔
storage.buckets.viewIntelligenceDetails	✔						✔		✔
storage.folders.create	✔	✔	✔	✔	✔	✔	✔			✔
storage.folders.delete	✔	✔	✔	✔	✔	✔	✔
storage.folders.get	✔	✔	✔	✔	✔	✔	✔		✔				✔	✔
storage.folders.list	✔	✔	✔	✔	✔	✔	✔		✔				✔	✔
storage.folders.rename	✔	✔	✔	✔	✔	✔	✔
storage.hmacKeys.create							✔				✔
storage.hmacKeys.delete							✔				✔
storage.hmacKeys.get							✔		✔		✔
storage.hmacKeys.list							✔		✔		✔
storage.hmacKeys.update							✔				✔
storage.intelligenceConfigs.get	✔						✔		✔
storage.intelligenceConfigs.update	✔
storage.managedFolders.create	✔	✔	✔	✔	✔	✔				✔
storage.managedFolders.delete	✔	✔	✔	✔	✔	✔
storage.managedFolders.get	✔	✔	✔	✔	✔	✔							✔	✔
storage.managedFolders.getIamPolicy	✔	✔	✔
storage.managedFolders.list	✔	✔	✔	✔	✔	✔							✔	✔
storage.managedFolders.setIamPolicy	✔	✔	✔
storage.multipartUploads.abort	✔	✔	✔	✔	✔	✔		✔		✔
storage.multipartUploads.create	✔	✔	✔	✔	✔	✔		✔		✔
storage.multipartUploads.list	✔	✔	✔	✔	✔	✔		✔						✔
storage.multipartUploads.listParts	✔	✔	✔	✔	✔	✔		✔		✔
storage.objects.create	✔	✔	✔	✔	✔	✔		✔		✔						✔
storage.objects.createContext	✔	✔	✔	✔	✔	✔				✔		✔			✔
storage.objects.delete	✔	✔	✔	✔	✔	✔		✔								✔		✔
storage.objects.deleteContext	✔	✔	✔	✔	✔							✔			✔
storage.objects.get	✔		✔	✔	✔			✔				✔	✔		✔			✔		✔
storage.objects.getIamPolicy	✔		✔	✔								✔
storage.objects.list	✔	✔	✔	✔	✔	✔		✔					✔	✔	✔	✔		✔
storage.objects.move	✔		✔	✔	✔
storage.objects.overrideUnlockedRetention	✔		✔	✔								✔
storage.objects.restore	✔	✔	✔	✔	✔	✔		✔
storage.objects.setIamPolicy	✔		✔	✔								✔
storage.objects.setRetention	✔	✔	✔	✔		✔						✔
storage.objects.update	✔		✔	✔	✔			✔				✔			✔	✔
storage.objects.updateContext	✔	✔	✔	✔	✔							✔			✔
storagebatchoperations.bucketOperations.get	✔
storagebatchoperations.bucketOperations.list	✔
storagebatchoperations.jobs.cancel	✔
storagebatchoperations.jobs.create	✔
storagebatchoperations.jobs.delete	✔
storagebatchoperations.jobs.get	✔
storagebatchoperations.jobs.list	✔
storagebatchoperations.locations.get	✔
storagebatchoperations.locations.list	✔
storagebatchoperations.operations.cancel	✔
storagebatchoperations.operations.delete	✔
storagebatchoperations.operations.get	✔
storagebatchoperations.operations.list	✔