Google Vision API service account permission

Question

I want to use Google Vision API with service account. The problem is that there is no role to give access to Vision API only, the only role I've found is owner role which is too powerful.

Is there is any role to give access only to Vision API or other way to give app permission without giving full access to GCP project?

Answer 1

There is no role needed for Vision API. I would recommend having no roles on the service account.