I’m trying to restrict permission to only have access to use the context cache.

When I look at the API/code documentation I see perms for some calls like this:

That tells me UpdateCacheConfig calls requires the aiplatform.cacheConfigs.update permission.

But annoyingly everything under GenAiCacheService says nothing about what IAM perms are required to make the API requests:

What permissions are relevant here for GenAiCacheService access?