If the app stores files: the bucket only

Open Cloud Storage → Buckets, tap the app's bucket, tab Permissions, Grant access, paste the service account e-mail, role Storage Object Admin, Save.

Skip if the app keeps no files. Giving this role at project level would open every bucket; on the bucket it opens one.