Tips

Before a user depolying applicaitons in AppEngine or AppEngine (K8s), the role bound with SpaceDeveloper permission of corresponding Space should be added to the group where the user belong.
Before a user using User Profile services, the role having BIGDATA ACCESS_ALLOW permission of BIGDATA to the group where the user belong.