Google Cloud DNS REST Api上的403错误

Question

I am using the Google Cloud DNS REST API (with Ruby REST Client) and I am receiving a 403 error using my google service account. This works correctly when I use the cloud console admin under my personal admin account.

My service account has "owner" permissions so I would think that I should not receive a 403 error.

{"response":"{
"error  ": {     "errors  ": 
 [    {       "domain":   "global  ",
   "reason  ":   "forbidden  ",
   "message  ":   "Forbidden  "    }   ],
 "code  ": 403,
"message ":   "Forbidden  "   }

Unfortunately this error does not shed any light on why I am receiving a 403.

Answer 1

There are 2 "Owner" permissions that are available in Google Cloud IAM console.

The correct one is accessed by clicking:

IAM & Admin -> IAM -> [Your Service Account] -> (Roles Dropdown) -> Owner (Then Click Save)

The one that didn't help for me was at:

IAM & Admin -> Service Accounts -> [Your Service Account] -> Permissions -> Add Member -> (Type in service account) -> (Select Owner Role)

I think that second one doesn't work? Or doesn't do anything.