title: How can I grant individual permissions in Google Cloud Platform for BigQuery users
body: <p>I need to setup very fine-grained access control for service accounts in GCP. I am seeing this error:</p>
  
  <blockquote>
    <p>"user SERVICE_ACCOUNT does not have bigquery.jobs.create permission in
    project PROJECT_ID".</p>
  </blockquote>
  
  <p>I know that via UI/gcloud util I can give it role roles/bigquery.
  user, but it has a lot of other permissions I don't want this service account to have. </p>
  
  <p>How can I grant individual permissions via gcloud/UI or some other means?</p>