Permission denied when deploying queue.yaml

[Andrew Buck]

When I attempt to use a service account to deploy an updated queue.yaml, I get the following error:

ERROR: (gcloud.app.deploy) PERMISSION_DENIED: The caller does not have permission

> Task :appengineDeployQueue FAILED

What permissions does the service account need for this operation? I already gave it both Cloud Tasks Admin and Cloud Tasks Queue Admin and it still get the error.

[Julie (cloud platform support)]

It seems from this document that what you have granted permissions for Cloud Tasks for should be sufficient as cloudtasks.queues.update is needed to modify an existing task. 

It does seem that that appengineDeployQueue is App Engine-specific Gradle task which likely means it requires App Engine roles and perhaps additional actions to use Gradle plugin if you have not done so yet. 

This will likely require investigation into your permissions so I suggest opening an issue tracker if the above suggestions do not resolve the issue. Please note I provided all documents in App Engine Standard format but Flex documents should exist. 

[Andrew Buck]

Thanks, I filed an issue tracker: https://issuetracker.google.com/issues/137078982