Mods
GCP

IAM Role: GCP/Spanner/Admin

PermissionGrant
spanner.databaseOperations.cancelAdmin
spanner.databases.beginOrRollbackReadWriteTransactionAdmin
spanner.databases.beginReadOnlyTransactionAdmin
spanner.databases.createAdmin
spanner.databases.dropAdmin
spanner.databases.setIamPolicyAdmin
spanner.databases.updateDdlAdmin
spanner.databases.writeAdmin
spanner.instanceOperations.cancelAdmin
spanner.instanceOperations.deleteAdmin
spanner.instances.createAdmin
spanner.instances.deleteAdmin
spanner.instances.setIamPolicyAdmin
spanner.instances.updateAdmin
spanner.sessions.createAdmin
spanner.sessions.deleteAdmin
spanner.databases.selectOperator
monitoring.timeSeries.listMetadata
resourcemanager.projects.getMetadata
spanner.databaseOperations.getMetadata
spanner.databaseOperations.listMetadata
spanner.databases.getMetadata
spanner.databases.getDdlMetadata
spanner.databases.getIamPolicyMetadata
spanner.databases.listMetadata
spanner.databases.readMetadata
spanner.instanceConfigs.getMetadata
spanner.instanceConfigs.listMetadata
spanner.instanceOperations.getMetadata
spanner.instanceOperations.listMetadata
spanner.instances.getMetadata
spanner.instances.getIamPolicyMetadata
spanner.instances.listMetadata
spanner.sessions.getMetadata
spanner.sessions.listMetadata