Mods
GCP

IAM Role: GCP/SQL/Admin

PermissionGrant
cloudsql.backupRuns.createAdmin
cloudsql.backupRuns.deleteAdmin
cloudsql.databases.createAdmin
cloudsql.databases.deleteAdmin
cloudsql.databases.updateAdmin
cloudsql.instances.addServerCaAdmin
cloudsql.instances.cloneAdmin
cloudsql.instances.connectAdmin
cloudsql.instances.createAdmin
cloudsql.instances.deleteAdmin
cloudsql.instances.demoteMasterAdmin
cloudsql.instances.exportAdmin
cloudsql.instances.failoverAdmin
cloudsql.instances.importAdmin
cloudsql.instances.promoteReplicaAdmin
cloudsql.instances.resetSslConfigAdmin
cloudsql.instances.rotateServerCaAdmin
cloudsql.instances.truncateLogAdmin
cloudsql.instances.updateAdmin
cloudsql.instances.restartOperator
cloudsql.instances.restoreBackupOperator
cloudsql.instances.startReplicaOperator
cloudsql.instances.stopReplicaOperator
cloudsql.backupRuns.getMetadata
cloudsql.backupRuns.listMetadata
cloudsql.databases.getMetadata
cloudsql.databases.listMetadata
cloudsql.instances.getMetadata
cloudsql.instances.listMetadata
cloudsql.instances.listServerCasMetadata
monitoring.timeSeries.listMetadata