I don't know what account the permission should go on and I don't know what permission it is either, I have tried with the cloudbuild account with project viewer and with the terraform account on the project.
Error:
Error: converting tfplan to CAI assets: adding resource changes to converter: adding resource create or update augmenting asset: getting resource ancestry for project prj-c-billing-logs-0843: googleapi: Error 403: The caller does not have permission