title: GCE API Required 'compute.zones.list' permission for 'projects/someproject'
body: <p>I have created project in GCP. Then i create service account with ComputeAdmin role. Then i enable "Compute Engine API" for project.</p>
  
  <p>But can't work with instances:</p>
  
  <blockquote>
    <p>#gcloud compute instances list </p>
    
    <p>ERROR: (gcloud.compute.instances.list) Some requests did not succeed: - Required 'compute.zones.list'
    permission for 'projects/someproject'</p>
  </blockquote>
  
  <p>what am I doing wrong ?</p>
  
  <p><strong>Edited</strong></p>
  
  <hr>
  
  <p>from service account: </p>
  
  <blockquote>
    <p>ERROR: (gcloud.projects.get-iam-policy) User
    [cloud66@project_id.iam.gserviceaccount.com] does not have permission
    to access project [project_id:getIamPolicy] (or it may not exist): The
    caller does not have permission</p>
  </blockquote>
  
  <p>When i switch to main google account: </p>
  
  <blockquote>
    <p>$ gcloud projects get-iam-policy project_id bindings:</p>
    
    <ul>
    <li><p>members:</p>
    
    <ul>
    <li>serviceAccount:cloud66@project_id.iam.gserviceaccount.com  </li>
    </ul>
    
    <p>role: roles/compute.admin</p></li>
    <li><p>members:</p>
    
    <ul>
    <li>serviceAccount:service-855312803173@compute-system.iam.gserviceaccount.com</li>
    </ul>
    
    <p>role: roles/compute.serviceAgent</p></li>
    <li><p>members:</p>
    
    <ul>
    <li>serviceAccount:855312803173-compute@developer.gserviceaccount.com</li>
    <li>serviceAccount:855312803173@cloudservices.gserviceaccount.com</li>
    </ul>
    
    <p>role: roles/editor</p></li>
    <li><p>members:</p>
    
    <ul>
    <li>user:my_google_user   role: roles/owner</li>
    </ul></li>
    </ul>
  </blockquote>
  
  <p>From Logs view:</p>
  
  <blockquote>
    <p>2020-01-28 16:46:30.932 EET Compute Engine list zones
    cloud66@project_id.iam.gserviceaccount.com PERMISSION_DENIED </p>
    
    <p>code: 7<br>
    message:  "PERMISSION_DENIED"</p>
  </blockquote>