title: How do I give a GCP service account storage.buckets.list access with read only access?
body: <p>I'm trying to do <code>gsutil ls</code> however that results in:</p>
  
  <pre><code>ubuntu@ip:~$ gsutil ls
  AccessDeniedException: 403 xxxxxxxxxxxx@xxxxxxxxxx.iam.gserviceaccount.com does not have storage.buckets.list access to project xxxxxxxxxxxxxxx.
  
  </code></pre>
  
  <p>Can I give this permission with <strong>only</strong> read / viewer access IAM roles?</p>