Para deploy de um serviço no Google Cloud Run, é preciso das seguintes permissões:
roles/run.admin
(Cloud Run Admin)roles/iam.serviceAccountUser
(Service Account User)roles/artifactregistry.reader
(Artifact Registry Reader, if applicable)roles/storage.admin
(Storage Object Admin, to upload source)roles/cloudbuild.builds.editor
(Cloud Build Editor)