Mods
GCP

IAM Role: GCP/App Engine/Admin

PermissionGrant
appengine.applications.createAdmin
appengine.applications.updateAdmin
appengine.instances.deleteAdmin
appengine.instances.enableDebugAdmin
appengine.memcache.addKeyAdmin
appengine.memcache.flushAdmin
appengine.memcache.updateAdmin
appengine.runtimes.actAsAdminAdmin
appengine.services.deleteAdmin
appengine.services.updateAdmin
appengine.versions.createAdmin
appengine.versions.deleteAdmin
appengine.versions.updateAdmin
cloudsecurityscanner.scans.createAdmin
cloudsecurityscanner.scans.deleteAdmin
cloudsecurityscanner.scans.updateAdmin
cloudsecurityscanner.scanruns.stopOperator
cloudsecurityscanner.scans.runOperator
appengine.applications.getMetadata
appengine.instances.getMetadata
appengine.instances.listMetadata
appengine.memcache.getMetadata
appengine.memcache.getKeyMetadata
appengine.memcache.listMetadata
appengine.operations.getMetadata
appengine.operations.listMetadata
appengine.services.getMetadata
appengine.services.listMetadata
appengine.versions.getMetadata
appengine.versions.getFileContentsMetadata
appengine.versions.listMetadata
cloudscheduler.jobs.getMetadata
cloudscheduler.jobs.listMetadata
cloudsecurityscanner.crawledurls.listMetadata
cloudsecurityscanner.results.getMetadata
cloudsecurityscanner.results.listMetadata
cloudsecurityscanner.scanruns.getMetadata
cloudsecurityscanner.scanruns.getSummaryMetadata
cloudsecurityscanner.scanruns.listMetadata
cloudsecurityscanner.scans.getMetadata
cloudsecurityscanner.scans.listMetadata
cloudtasks.queues.getIamPolicyMetadata
compute.addresses.listMetadata
resourcemanager.projects.getMetadata