If you refer to the "Predefined App Engine roles" sub-chapter <https://cloud.google.com/appengine/docs/flexible/python/access-control#predefined_app_engine_roles> of the "Access Control" online document, you'll notice that only the App Engine Deployer role has "Write access only to deploy and create a new version". The roles you used, owner and editor, have both just read-only access. In other words, you need to assign the the App Engine Deployer role to your service account, to enable deployment. You need to enable App Engine API as well.
-- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/0c7fdaab-9ed2-403c-bf44-b602713de51f%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
