Shows how to create a service account that uses a custom role

create_service_account.sh

# If you receive any error while running the commands bellow, create the Service Account using the Cloud Console UI.
# The Roles and Permissions are the same in the UI.

# Change the PROJECT_ID value to your project
PROJECT_ID=your-project-id
SERVICE_ACCOUNT_NAME=compute-execute-batch-job

# Create the service account
gcloud beta iam service-accounts create ${SERVICE_ACCOUNT_NAME} \
    --description "SA that will be used by the Compute Engine VM" \
    --display-name ${SERVICE_ACCOUNT_NAME}

# add the Logs Writter ROLE
gcloud projects add-iam-policy-binding ${PROJECT_ID}\
    --member "serviceAccount:${SERVICE_ACCOUNT_NAME}@${PROJECT_ID}.iam.gserviceaccount.com"\
    --role "roles/logging.logWriter"

# create the Custom Compute VM Delete ROLE
gcloud iam roles create custom.vm.delete --project ${PROJECT_ID} \
--title "Custom Compute VM Delete ROLE" --description "Custom role for VM Delete permissions." \
--permissions compute.disks.delete,compute.instances.delete,compute.instances.deleteAccessConfig --stage ALPHA

# add the Custom Compute VM Delete ROLE
gcloud projects add-iam-policy-binding ${PROJECT_ID}\
    --member "serviceAccount:${SERVICE_ACCOUNT_NAME}@${PROJECT_ID}.iam.gserviceaccount.com"\
    --role "roles/custom.vm.delete"

https://gist.github.com/mesmacosta/bab1fe7cbb37ea47201bca3f745aeff1#file-create_service_account-sh-L16
correct role name - roles/logging.logWriter

Thanks @kadavil