GCP Cloud Shell command for custom IAM role with minimum GCP permissions

This GCP cloud shell command is used for creating custom IAM role with minimum GCP permissions that are required by CSM.

Cloud shell command for custom IAM role with minimum GCP permissions

gcloud iam roles create <ROLE_NAME> --title <ROLE_TITLE> --project <PROJECT> --stage <ROLE_STAGE> --permissions compute.disks.create,compute.disks.createSnapshot,compute.disks.delete,compute.disks.get,compute.disks.list,compute.disks.setLabels,compute.disks.use,compute.instances.attachDisk,compute.instances.create,compute.instances.delete,compute.instances.detachDisk,compute.instances.get,compute.instances.list,compute.instances.setDeletionProtection,compute.instances.setLabels,compute.instances.setMetadata,compute.instances.setServiceAccount,compute.instances.setTags,compute.instances.start,compute.instances.stop,compute.networks.list,compute.projects.get,compute.regionOperations.get,compute.regions.list,compute.snapshots.create,compute.snapshots.delete,compute.snapshots.get,compute.snapshots.list,compute.snapshots.setLabels,compute.snapshots.useReadOnly,compute.subnetworks.list,compute.subnetworks.use,compute.zoneOperations.get,compute.zones.get,compute.zones.list,iam.serviceAccounts.actAs --quiet