Genini Api calls

For Service Account it’s usually enough if you have Owner permission without any other permission.

Have you made a successful request with your service account before because if am not wrong you need to pass the Project ID in the header as well.