IAM serviceusage.services.use is required

What is the problem you are having with rclone?

I am seeing the following error when attempting to interact with a GCS bucket, and am not sure why it is needed or if I am doing something wrong:

<User> does not have serviceusage.services.use access to the Google Cloud project. Permission 'serviceusage.services.use' denied on resource (or it may not exist)., forbidden

Run the command 'rclone version' and share the full output of the command.

rclone v1.69.3

  • os/version: alpine 3.21.3 (64 bit)

  • os/kernel: 6.6.71-0-virt (aarch64)

  • os/type: linux

  • os/arch: arm64 (ARMv8 compatible)

  • go/version: go1.24.3

  • go/linking: static

  • go/tags: none

Which cloud storage system are you using? (eg Google Drive)

Google Cloud Storage

The command you were trying to run (eg rclone copy /tmp remote:tmp)

rclone lsf --dirs-only  -vv my_remote:my_bucket

Please run 'rclone config redacted' and share the full output. If you get command not found, please make sure to update rclone.

[my_remote]
type = google cloud storage
project_number = XXX
user_project = XXX
location = us-east1
env_auth = true
anonymous = false

A log from the command that you were trying to run with the -vv flag

2025/07/15 19:00:11 DEBUG : rclone: Version "v1.69.3" starting with parameters ["rclone" "lsf" "--dirs-only" "-vv" "my_remote:my_bucket"]
2025/07/15 19:00:11 DEBUG : Creating backend with remote "my_remote:my_bucket"
2025/07/15 19:00:11 DEBUG : Using config file from "/config/rclone/rclone.conf"
2025/07/15 19:00:16 ERROR : : error listing: googleapi: Error 403: <User> does not have serviceusage.services.use access to the Google Cloud project. Permission 'serviceusage.services.use' denied on resource (or it may not exist)., forbidden
2025/07/15 19:00:16 DEBUG : 6 go routines active
2025/07/15 19:00:16 NOTICE: Failed to lsf with 2 errors: last error was: error in ListJSON: googleapi: Error 403: <User> does not have serviceusage.services.use access to the Google Cloud project. Permission 'serviceusage.services.use' denied on resource (or it may not exist)., forbidden

problem appears related to a Requester Pays buckets, as uncovered by setting

anonymous = true

the fix is to remove user_project from the config file

welcome to the forum,

can rclone selfupdate and test again.