I have recently encountered this error when using gsutil to download a cohort: AccessDeniedException: 403 [my_email_address](mailto:my_email_address) does not have storage.objects.list access to the Google Cloud Storage bucket.
I checked my current permissions for the Storage Object Viewer role, and storage.objects.list does appear in the list.
This was from querying bigquery-public-data.idc_current.dicom_all. I just checked the set of collection_ids in my cohort and confirmed that one was in the limited access collection.