An analytics team needs to read data out of Cloud SQL for PostgreSQL and update a table in Cloud Bigtable. You need to create a service account and grant least privilege access using predefined roles. What roles should you assign to the service account?