Hello,

I am authenticated as GCP service account. I have to create query, run job as service principle and get result.

I'm both cases, I set permissions CAN_MANAGE for group "users" for both query and job. When I create the query with RunAsMode.OWNER, it gets limited permissions of invoker SP, but I can then access output of the task. When I create query with RunAsMode.VIEWER it gets required permissions of RunAs SP, but I am not able to access output of the task. I get error: insufficient privileges to access object queryExecutionSessions/*. As I understand from the roles description, it should have permissions with CAN_MANAGE.

Thank you for help.