Permission	serviceAgent	admin	editor	networkAdmin	user	workstationCreator	workstationLimitExemptedCreator	policyAdmin	operationViewer
compute.acceleratorTypes.get		✔
compute.acceleratorTypes.list		✔
compute.addresses.create	✔			✔
compute.addresses.createInternal	✔			✔
compute.addresses.delete	✔			✔
compute.addresses.deleteInternal	✔			✔
compute.addresses.get	✔			✔
compute.addresses.use	✔			✔
compute.disks.create	✔
compute.disks.createSnapshot	✔
compute.disks.createTagBinding	✔
compute.disks.delete	✔
compute.disks.deleteTagBinding	✔
compute.disks.get	✔
compute.disks.list	✔
compute.disks.resize	✔
compute.disks.setLabels	✔
compute.disks.use	✔
compute.disks.useReadOnly	✔
compute.firewalls.create	✔
compute.firewalls.delete	✔
compute.firewalls.get	✔
compute.firewalls.update	✔
compute.forwardingRules.create	✔			✔
compute.forwardingRules.delete	✔			✔
compute.forwardingRules.get	✔			✔
compute.forwardingRules.pscCreate	✔			✔
compute.forwardingRules.pscDelete	✔			✔
compute.globalOperations.get	✔			✔
compute.instances.attachDisk	✔
compute.instances.create	✔
compute.instances.createTagBinding	✔
compute.instances.delete	✔
compute.instances.deleteTagBinding	✔
compute.instances.detachDisk	✔
compute.instances.get	✔
compute.instances.getGuestAttributes	✔
compute.instances.getSerialPortOutput	✔
compute.instances.setLabels	✔
compute.instances.setMetadata	✔
compute.instances.setServiceAccount	✔
compute.instances.setTags	✔
compute.machineTypes.get		✔
compute.machineTypes.list		✔
compute.networks.addPeering	✔
compute.networks.get	✔	✔		✔
compute.networks.list		✔
compute.networks.removePeering	✔
compute.networks.updatePolicy	✔			✔
compute.networks.use	✔			✔
compute.networks.useExternalIp	✔			✔
compute.regionOperations.get	✔			✔
compute.regions.get	✔
compute.reservations.get	✔
compute.snapshots.create	✔
compute.snapshots.createTagBinding	✔
compute.snapshots.delete	✔
compute.snapshots.deleteTagBinding	✔
compute.snapshots.get	✔
compute.snapshots.listTagBindings	✔
compute.snapshots.setLabels	✔
compute.snapshots.useReadOnly	✔
compute.subnetworks.get	✔	✔		✔
compute.subnetworks.list		✔
compute.subnetworks.use	✔			✔
compute.subnetworks.useExternalIp	✔			✔
compute.zoneOperations.get	✔			✔
compute.zones.get		✔
compute.zones.list		✔
dns.networks.bindPrivateDNSZone	✔
dns.networks.targetWithPeeringZone	✔
iam.serviceAccounts.actAs	✔
iam.serviceAccounts.get	✔	✔
iam.serviceAccounts.list	✔	✔
resourcemanager.projects.get		✔	✔			✔	✔
resourcemanager.projects.list		✔	✔			✔	✔
resourcemanager.tagValueBindings.create	✔
resourcemanager.tagValueBindings.delete	✔
servicedirectory.namespaces.create	✔			✔
servicedirectory.namespaces.delete	✔			✔
servicedirectory.services.create	✔			✔
servicedirectory.services.delete	✔			✔
serviceusage.services.get	✔
workstations.operations.get		✔	✔		✔	✔	✔		✔
workstations.operations.list		✔	✔		✔	✔	✔
workstations.workstationClusters.create		✔	✔
workstations.workstationClusters.createTagBinding		✔
workstations.workstationClusters.delete		✔	✔
workstations.workstationClusters.deleteTagBinding		✔
workstations.workstationClusters.get		✔	✔			✔
workstations.workstationClusters.list		✔	✔			✔
workstations.workstationClusters.listEffectiveTags		✔	✔
workstations.workstationClusters.listTagBindings		✔	✔
workstations.workstationClusters.update		✔	✔
workstations.workstationConfigs.create		✔	✔
workstations.workstationConfigs.delete		✔	✔
workstations.workstationConfigs.get		✔	✔			✔	✔
workstations.workstationConfigs.getIamPolicy		✔	✔
workstations.workstationConfigs.list		✔	✔
workstations.workstationConfigs.setIamPolicy		✔
workstations.workstationConfigs.update		✔	✔
workstations.workstations.create		✔	✔			✔	✔
workstations.workstations.delete		✔	✔		✔
workstations.workstations.get		✔	✔		✔
workstations.workstations.getIamPolicy		✔	✔					✔
workstations.workstations.list		✔	✔
workstations.workstations.setIamPolicy		✔						✔
workstations.workstations.start		✔	✔		✔
workstations.workstations.stop		✔	✔		✔
workstations.workstations.update		✔	✔		✔
workstations.workstations.use			✔		✔