title: Shared VPC and Datastream SA Network Admin Role
body: <p>According to <a href="https://cloud.google.com/datastream/docs/create-a-private-connectivity-configuration#before-you-begin" rel="nofollow noreferrer">this document</a>, if using a shared VPC, the Datastream service account requires the <code>COMPUTE.NETWORKADMIN role</code> on the host project. However, I was wondering if there were more granular <code>permissions/roles</code> that can be assigned instead since the <code>COMPUTE.NETWORKADMIN</code> is quite expansive.</p>