I would like to restrict a service account to only Speech-to-Text.
The documentation suggests to grant the service account Owner access, but my understanding is that the service account can then do anything.
Is it possible to grant a service account access to only the Cloud Speech-To-Text APIs?
Or, failing that, what are the most restrictive permissions that I can grant to a service account while still permitting access to Cloud Speech-To-Text?
I cannot find any specific permission or role in the console that appears to cover this function.