Permissions

The Enforce Flow Logging is Enabled for GCP VPC Subnetworks policy pack requires 1 permission:

compute.subnetworks.update