| secretmanager.secrets.create | Admin |
| secretmanager.secrets.delete | Admin |
| secretmanager.secrets.setIamPolicy | Admin |
| secretmanager.secrets.update | Admin |
| secretmanager.versions.access | Admin |
| secretmanager.versions.add | Admin |
| secretmanager.versions.destroy | Admin |
| secretmanager.versions.disable | Admin |
| secretmanager.versions.enable | Admin |
| resourcemanager.projects.get | Metadata |
| resourcemanager.projects.list | Metadata |
| secretmanager.locations.get | Metadata |
| secretmanager.locations.list | Metadata |
| secretmanager.secrets.get | Metadata |
| secretmanager.secrets.getIamPolicy | Metadata |
| secretmanager.secrets.list | Metadata |
| secretmanager.versions.get | Metadata |
| secretmanager.versions.list | Metadata |
