As of now, there is no IAM permission for the insert only and as I double check and come to think a way to do it, but none.

On Google side, there is a ‘feature request’ that you can file but there is no timeline on when it can be done.