google-app-engine


What permission is required for a service account to deploy to Google App Engine using gcloud?


I have created a service account in order to deploy a project to google app engine.
The service account I have created has these two roles:
App Engine -> App Engine Deployer
Storage -> Storage Object Admin
I downloaded the json key file, and then run these commands:
gcloud auth activate-service-account --key-file key.json
gcloud -q app deploy app_deploy.yaml --version 1.0 --promote
I got this error message:
ERROR: (gcloud.app.deploy) Error Response: [403] Operation not allowed
Details: [
[
{
"#type": "type.googleapis.com/google.rpc.ResourceInfo",
"description": "The \"appengine.applications.get\" permission is required.",
"resourceType": "gae.api"
}
]
]
What role did I miss to add?
It works if I replace the role App Engine -> App Engine Deployer with App Engine -> App Engine Admin.
No idea why Deployer will not be sufficient for app deployment.

Related Links

Pricing for Google App Engine with Custom SSL
GAE (JPA) add database entry manually
App Engine, JDO and Maven. Error on startup
Cant write cookies on live instance of google appengine
Google App Engine - Retrieving Parameters from URI in a doGet()?
How to detect if entity has no attribute (not model) in Google App Engine
GAE synchronized data with instances
How to increase GAE datastore index quota?
ndb independent transactions and retry
NDB querying a GenericProperty in repeated Expando StructuredProperty
objectify filter empty values
GAE error (<stderr>: SystemId Failed
Backend instance at custom domain
Manually add entity to empty Google App Engine DataStore
Google App Engine Log - ms and cpu_ms [duplicate]
unable to deploy after upgrading to 1.7.4

Categories

HOME
sonarqube
fabricjs
phpword
toolbox
sitecore
spring-data-redis
appcelerator
ms-access-2016
javacc
newrelic
database-normalization
emscripten
telegram-bot
gembox-spreadsheet
regular-language
azure-container-service
google-schemas
reactive-programming
database-connection
pagespeed
froala
windows-server-2003
surveymonkey
bringtofront
quantlib
aws-codecommit
event-flow
kudu
turfjs
playstation-portable
indy10
protege4
latitude-longitude
sql-server-ce
sessionstorage
signals-slots
stringtokenizer
chronicle-map
mschart
mongotemplate
boxing
compiler-design
git-flow
rackspace-cloud
structuremap4
atlas
seek
dotnetnuke-7
google-query-language
cassia
riot
nss
findfirst
realsense
concept-insights
relativelayout
typemock
avahi
dnssec
ansi
mraid
diff3
phpldapadmin
boost-program-options
iiop
administration
iso-prolog
genymotion-call
encryption-asymmetric
ignite-ui
process-explorer
onload-event
chart-director
resource-management
jquery-blockui
role
cgbitmapcontextcreate
cdonts
load-time
dot-emacs
message-passing
scrollbars
blender-2.49

Resources

Encrypt Message