Merge "Add permissions for GCA to access various services" into main