We have been working on setting up GCP cloud storage and were able to get it working, however, the permissions set to allow it to work are not considered secure. Currently, we have the following permissions applied:

Project perms:

storage.buckets.list
storage.buckets.get

Bucket perms:

Storage Admin

Has anyone been able to determine or have documentation as to what the minimum required permissions are for Google Cloud storage to work with Nuxeo? We are looking into creating a custom role that has only the necessary permissions.