title: Google Vision API service account permission
body: <p>I want to use <code>Google Vision API</code> with service account. The problem is that there is no role to give access to <code>Vision API</code> only, the only role I've found is <code>owner</code> role which is too powerful.</p>
  <p>Is there is any role to give access only to <code>Vision API</code> or other way to give app permission without giving full access to GCP project?</p>