Permission	admin	serviceAgent	deploymentAdmin	worker	evaluationAdmin	viewer	evaluationViewer	deploymentViewer	workloadViewer	insightWriter
cloudasset.assets.exportAccessPolicy		✔
cloudasset.assets.exportIamPolicy		✔
cloudasset.assets.exportOSInventories		✔
cloudasset.assets.exportOrgPolicy		✔
cloudasset.assets.exportResource		✔
cloudasset.assets.listAccessPolicy		✔
cloudasset.assets.listIamPolicy		✔
cloudasset.assets.listOSInventories		✔
cloudasset.assets.listOrgPolicy		✔
cloudasset.assets.listResource		✔
cloudasset.assets.searchAllResources		✔
compute.acceleratorTypes.list	✔		✔
compute.diskTypes.list	✔		✔
compute.machineTypes.list	✔		✔
compute.networks.list	✔		✔
compute.projects.get	✔		✔
compute.regions.list	✔		✔
compute.subnetworks.list	✔		✔
compute.zones.list	✔		✔
config.deployments.create		✔
config.deployments.delete		✔
config.deployments.get		✔
config.deployments.list		✔
config.deployments.update		✔
config.locations.get		✔
config.locations.list		✔
config.operations.cancel		✔
config.operations.delete		✔
config.operations.get		✔
config.operations.list		✔
config.resources.list		✔
config.revisions.get		✔
config.revisions.list		✔
dns.managedZones.list	✔		✔
iam.serviceAccounts.list	✔		✔
monitoring.metricDescriptors.get		✔
monitoring.metricDescriptors.list		✔
monitoring.monitoredResourceDescriptors.get		✔
monitoring.monitoredResourceDescriptors.list		✔
monitoring.timeSeries.list	✔	✔	✔
orgpolicy.policy.get	✔			✔	✔	✔	✔
resourcemanager.projects.get	✔		✔	✔	✔	✔	✔	✔	✔
resourcemanager.projects.getIamPolicy	✔		✔
resourcemanager.projects.list	✔		✔	✔	✔	✔	✔	✔	✔
serviceusage.quotas.get	✔		✔
serviceusage.services.get	✔		✔
serviceusage.services.use		✔
storage.buckets.list	✔		✔
storage.objects.list	✔		✔
workloadmanager.actuations.create	✔		✔	✔
workloadmanager.actuations.delete	✔		✔	✔
workloadmanager.actuations.get	✔		✔	✔		✔		✔
workloadmanager.actuations.list	✔		✔	✔		✔		✔
workloadmanager.deployments.create	✔		✔	✔
workloadmanager.deployments.delete	✔		✔	✔
workloadmanager.deployments.get	✔		✔	✔		✔		✔
workloadmanager.deployments.list	✔		✔	✔		✔		✔
workloadmanager.discoveredprofiles.get	✔			✔		✔			✔
workloadmanager.discoveredprofiles.getHealth	✔			✔		✔			✔
workloadmanager.discoveredprofiles.list	✔			✔		✔			✔
workloadmanager.evaluations.create	✔			✔	✔
workloadmanager.evaluations.delete	✔			✔	✔
workloadmanager.evaluations.get	✔			✔	✔	✔	✔
workloadmanager.evaluations.list	✔			✔	✔	✔	✔
workloadmanager.evaluations.run	✔			✔	✔
workloadmanager.evaluations.update	✔			✔	✔
workloadmanager.executions.delete	✔			✔	✔
workloadmanager.executions.get	✔			✔	✔	✔	✔
workloadmanager.executions.list	✔			✔	✔	✔	✔
workloadmanager.insights.export	✔	✔
workloadmanager.insights.listSapSystems	✔	✔
workloadmanager.insights.write	✔			✔						✔
workloadmanager.locations.get	✔		✔		✔
workloadmanager.locations.list	✔		✔		✔
workloadmanager.operations.cancel	✔		✔		✔
workloadmanager.operations.delete	✔		✔		✔
workloadmanager.operations.get	✔		✔		✔
workloadmanager.operations.list	✔		✔		✔
workloadmanager.results.list	✔			✔	✔	✔	✔
workloadmanager.rules.list	✔			✔	✔	✔	✔