gcp-iam-catalog Roles Permissions
🔑

cloudkms.cryptoKeyVersions.restore

Granted by 2 roles
🔍
Role Name
Role Type
roles/cloudkms.admin
Predefined
roles/owner
Basic
🔍