title: What permission is required for a service account to deploy to Google App Engine using gcloud?
body: <p>I have created a service account in order to deploy a project to google app engine.</p>
  
  <p>The service account I have created has these two roles:</p>
  
  <ol>
  <li><em>App Engine -> App Engine Deployer</em> </li>
  <li><em>Storage -> Storage Object Admin</em></li>
  </ol>
  
  <p>I downloaded the json key file, and then run these commands:</p>
  
  <pre><code>gcloud auth activate-service-account --key-file key.json
  gcloud -q app deploy app_deploy.yaml --version 1.0 --promote
  </code></pre>
  
  <p>I got this error message:</p>
  
  <pre><code>ERROR: (gcloud.app.deploy) Error Response: [403] Operation not allowed
  
  Details: [
    [
      {
        "@type": "type.googleapis.com/google.rpc.ResourceInfo",
        "description": "The \"appengine.applications.get\" permission is required.",
        "resourceType": "gae.api"
      }
    ]
  ]
  </code></pre>
  
  <p>What role did I miss to add?</p>