I'm trying to get a Cloud Build trigger to auto deploy my service on any merge to main. I think I've following all the correct permissioning set up, but I still seem to be getting a PERMISSION_DENIED error:

As far as I can tell I should have all the correct permissions set up:



Here is my cloud build yaml:
steps:
- name: 'gcr.io/google.com/cloudsdktool/cloud-sdk:slim'
args:
- run
- deploy
- '${_SERVICE_NAME}'
- '--source'
- ./backend/
- '--region=${_DEPLOY_REGION}'
id: Deploy
entrypoint: gcloud
options:
substitutionOption: ALLOW_LOOSE
logging: CLOUD_LOGGING_ONLY
substitutions:
_DEPLOY_REGION: us-central1
_TRIGGER_ID: 764a92ae-0aef-494d-91e9-831fa0abf752
_SERVICE_NAME: monorepo
tags:
- gcp-cloud-build-deploy-cloud-run
- gcp-cloud-build-deploy-cloud-run-managed
- monorepo