Permission	admin	deploymentAdmin	serviceAgent	worker	evaluationAdmin	viewer	workloadViewer	evaluationViewer	deploymentViewer	insightWriter
cloudasset.assets.exportAccessPolicy			✔
cloudasset.assets.exportIamPolicy			✔
cloudasset.assets.exportOSInventories			✔
cloudasset.assets.exportOrgPolicy			✔
cloudasset.assets.exportResource			✔
cloudasset.assets.listAccessPolicy			✔
cloudasset.assets.listIamPolicy			✔
cloudasset.assets.listOSInventories			✔
cloudasset.assets.listOrgPolicy			✔
cloudasset.assets.listResource			✔
cloudasset.assets.searchAllResources			✔
compute.acceleratorTypes.list	✔	✔
compute.diskTypes.list	✔	✔
compute.machineTypes.list	✔	✔
compute.networks.list	✔	✔
compute.projects.get	✔	✔
compute.regions.list	✔	✔
compute.subnetworks.list	✔	✔
compute.zones.list	✔	✔
config.deployments.create			✔
config.deployments.delete			✔
config.deployments.get			✔
config.deployments.list			✔
config.deployments.update			✔
config.locations.get			✔
config.locations.list			✔
config.operations.cancel			✔
config.operations.delete			✔
config.operations.get			✔
config.operations.list			✔
config.resources.list			✔
config.revisions.get			✔
config.revisions.list			✔
dns.managedZones.list	✔	✔
iam.serviceAccounts.list	✔	✔
monitoring.metricDescriptors.get			✔
monitoring.metricDescriptors.list			✔
monitoring.monitoredResourceDescriptors.get			✔
monitoring.monitoredResourceDescriptors.list			✔
monitoring.timeSeries.list	✔	✔	✔
orgpolicy.policy.get	✔			✔	✔	✔		✔
resourcemanager.projects.get	✔	✔		✔	✔	✔	✔	✔	✔
resourcemanager.projects.getIamPolicy	✔	✔
resourcemanager.projects.list	✔	✔		✔	✔	✔	✔	✔	✔
serviceusage.consumerpolicy.analyze	✔	✔					✔
serviceusage.consumerpolicy.get	✔	✔					✔
serviceusage.effectivepolicy.get	✔	✔					✔
serviceusage.groups.list	✔	✔					✔
serviceusage.groups.listExpandedMembers	✔	✔					✔
serviceusage.groups.listMembers	✔	✔					✔
serviceusage.quotas.get	✔	✔
serviceusage.services.get	✔	✔					✔
serviceusage.services.list							✔
serviceusage.services.use			✔
serviceusage.values.test	✔	✔					✔
storage.buckets.list	✔	✔
storage.objects.list	✔	✔
workloadmanager.actuations.create	✔	✔		✔
workloadmanager.actuations.delete	✔	✔		✔
workloadmanager.actuations.get	✔	✔		✔		✔			✔
workloadmanager.actuations.list	✔	✔		✔		✔			✔
workloadmanager.deployments.create	✔	✔		✔
workloadmanager.deployments.delete	✔	✔		✔
workloadmanager.deployments.get	✔	✔		✔		✔			✔
workloadmanager.deployments.list	✔	✔		✔		✔			✔
workloadmanager.discoveredprofiles.get	✔			✔		✔	✔
workloadmanager.discoveredprofiles.getHealth	✔			✔		✔	✔
workloadmanager.discoveredprofiles.list	✔			✔		✔	✔
workloadmanager.evaluations.create	✔			✔	✔
workloadmanager.evaluations.delete	✔			✔	✔
workloadmanager.evaluations.get	✔			✔	✔	✔		✔
workloadmanager.evaluations.list	✔			✔	✔	✔		✔
workloadmanager.evaluations.run	✔			✔	✔
workloadmanager.evaluations.update	✔			✔	✔
workloadmanager.executions.delete	✔			✔	✔
workloadmanager.executions.get	✔			✔	✔	✔		✔
workloadmanager.executions.list	✔			✔	✔	✔		✔
workloadmanager.insights.delete	✔									✔
workloadmanager.insights.export	✔		✔
workloadmanager.insights.listSapSystems	✔		✔
workloadmanager.insights.write	✔			✔						✔
workloadmanager.locations.get	✔	✔			✔
workloadmanager.locations.list	✔	✔			✔
workloadmanager.operations.cancel	✔	✔			✔
workloadmanager.operations.delete	✔	✔			✔
workloadmanager.operations.get	✔	✔			✔
workloadmanager.operations.list	✔	✔			✔
workloadmanager.results.list	✔			✔	✔	✔		✔
workloadmanager.rules.list	✔			✔	✔	✔		✔