Grant permission to list enabled service API for account.

[Shubham Yedage]

Following is the warning I am getting while deploying simple python(2.7) flask code (with static files) on AppEngine's Flexible environment, (though the deployment is not failing except a part where my static js file is not getting updated),

"WARNING: Unable to verify that the Appengine Flexible API is enabled for project [project-name]. You may not have permission to list enabled services on this project. If it is not enabled, this may cause problems in running your deployment. Please ask the project owner to ensure that the Appengine Flexible API has been enabled and that this account has permission to list enabled APIs.

Note: When deploying with a service account, the Service Management API needs to be enabled in order to verify that the Appengine Flexible API is enabled. Please ensure the Service Management API has been enabled on this project by the project owner."

I have enabled Appengine Flexible API and Service Management API, but I am not sure about the part where I have to grant service account access to list enabled APIs. Please let me know this procedure. Thanks in advance!

[George (Cloud Platform Support)]

The likely role is "roles/appengine.deployer". You may have a look at the "Understanding Roles" documentation page. The service account's default permissions do not allow the account to perform certain actions, such as deploying to App Engine or managing Compute Engine or Kubernetes Engine resources.

You can enable your service account to perform these actions by granting the account additional IAM roles. Use the IAM & Admin section in the Google Cloud Platform Console and add the appropriate roles to the service account's list of roles.