触发云构建需要什么权限?

我试图触发一个gcloud构建,但是当通过curl调用时:

curl -X POST -T request.json -H "Authorization: Bearer ${gcloudBearer}" \
        https://cloudbuild.googleapis.com/v1/projects/"$PROJECT_ID"/triggers/"$TRIGGER_ID":run

我得到的答复是:

{
  "error": {
    "code": 403,
    "message": "The caller does not have permission",
    "status": "PERMISSION_DENIED"
  }
}

但是,我使用的服务帐户已启用以下角色:

Cloud Build Service Account

我需要额外的权限/角色吗?如果是的话,这将是哪个角色?