You are adding steps to a working automation that uses a service account to authenticate. You need to drive the automation the ability to retrieve files from a
Cloud Storage bucket. Your organization requires using the least privilege possible.
What should you do?

A. Grant the compute.instanceAdmin to your user account. B. Grant the iam.serviceAccountUser to your user account. C. Grant the read-only privilege to the service account for the Cloud Storage bucket. D. Grant the cloud-platform privilege to the service account for the Cloud Storage bucket.