CloudEndure requires a service account with the Compute Engine API. The account should have minimum permissions of Editor on the Project level.
Specifically within the Compute Engine IAM, the following roles are required:
CloudEndure also requires compute.subnetworks.list on the host project.
For further instructions on enabling GCP access refer to the GCP documentation.