--role

Cloud SQL IAM roles

https://cloud.google.com/sql/docs/mysql/iam-roles

Official example:

gcloud projects add-iam-policy-binding example-project-id-1 --member='user:[email protected]' --role='roles/editor'

roles/cloudsql.editor
roles/storage.objects.create
roles/container.developer