Update Slurm service-account permissions (#4326)

Author: wiktorn

examples/hpc-enterprise-slurm.yaml

@@ -72,11 +72,11 @@ deployment_groups:
     settings:
       name: controller
       project_roles:
+      - bigquery.dataOwner # needed if enable_bigquery_load is enabled
       - compute.instanceAdmin.v1
       - iam.serviceAccountUser
       - logging.logWriter
       - monitoring.metricWriter
-      - pubsub.admin
       - storage.objectViewer
 
   - id: login_sa
@@ -95,7 +95,7 @@ deployment_groups:
       project_roles:
       - logging.logWriter
       - monitoring.metricWriter
-      - storage.objectCreator
+      - storage.objectUser
 
   - id: homefs
     source: modules/file-system/filestore