title: What's the equivalent IAM role for https://www.googleapis.com/auth/devstorage.read_write scope
body: <p>I am converting the old way to creating GCP node pools (via --scope parameter to specific permission) to use an GCP IAM service account.</p>
  
  <p>What's the proper (minimum required) predefined role that I should assign to the newly created GCP IAM service account in order to port </p>
  
  <p><code>https://www.googleapis.com/auth/devstorage.read_write</code> </p>
  
  <p>scoped permissions over?</p>
  
  <p>Thank you</p>