Service accounts overview | IAM Documentation

<!doctype html> <html lang="en" dir="ltr"> <head> <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com"> <meta name="google-signin-scope" content="profile email https://www.googleapis.com/auth/developerprofiles https://www.googleapis.com/auth/developerprofiles.award https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/webhistory"> <meta property="og:site_name" content="Google Cloud"> <meta property="og:type" content="website"><meta name="theme-color" content="#039be5"><meta charset="utf-8"> <meta content="IE=Edge" http-equiv="X-UA-Compatible"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="manifest" href="/_pwa/cloud/manifest.json" crossorigin="use-credentials"> <link rel="preconnect" href="//www.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.gstatic.com" crossorigin> <link rel="preconnect" href="//fonts.googleapis.com" crossorigin> <link rel="preconnect" href="//apis.google.com" crossorigin> <link rel="preconnect" href="//www.google-analytics.com" crossorigin><link rel="stylesheet" href="//fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"> <link rel="stylesheet" href="//fonts.googleapis.com/css2?family=Material+Icons&family=Material+Symbols+Outlined&display=block"><link rel="stylesheet" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/css/app.css"> <link rel="shortcut icon" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/favicon.ico"> <link rel="apple-touch-icon" href="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png"><link rel="canonical" href="https://cloud.google.com/iam/docs/service-account-overview"><link rel="search" type="application/opensearchdescription+xml" title="Google Cloud" href="https://cloud.google.com/s/opensearch.xml"> <link rel="alternate" hreflang="en" href="https://cloud.google.com/iam/docs/service-account-overview" /><link rel="alternate" hreflang="x-default" href="https://cloud.google.com/iam/docs/service-account-overview" /><link rel="alternate" hreflang="zh-Hans" href="https://cloud.google.com/iam/docs/service-account-overview?hl=zh-cn" /><link rel="alternate" hreflang="fr" href="https://cloud.google.com/iam/docs/service-account-overview?hl=fr" /><link rel="alternate" hreflang="de" href="https://cloud.google.com/iam/docs/service-account-overview?hl=de" /><link rel="alternate" hreflang="id" href="https://cloud.google.com/iam/docs/service-account-overview?hl=id" /><link rel="alternate" hreflang="it" href="https://cloud.google.com/iam/docs/service-account-overview?hl=it" /><link rel="alternate" hreflang="ja" href="https://cloud.google.com/iam/docs/service-account-overview?hl=ja" /><link rel="alternate" hreflang="ko" href="https://cloud.google.com/iam/docs/service-account-overview?hl=ko" /><link rel="alternate" hreflang="pt-BR" href="https://cloud.google.com/iam/docs/service-account-overview?hl=pt-br" /><link rel="alternate" hreflang="es-419" href="https://cloud.google.com/iam/docs/service-account-overview?hl=es-419" /><title>Service accounts overview  |  IAM Documentation  |  Google Cloud</title> <meta property="og:title" content="Service accounts overview  |  IAM Documentation  |  Google Cloud"><meta name="description" content="Conceptual and lifecycle information about IAM service accounts."> <meta property="og:description" content="Conceptual and lifecycle information about IAM service accounts."><meta property="og:url" content="https://cloud.google.com/iam/docs/service-account-overview"><meta property="og:image" content="https://cloud.google.com/_static/cloud/images/social-icon-google-cloud-1200-630.png"> <meta property="og:image:width" content="1200"> <meta property="og:image:height" content="630"><meta property="og:locale" content="en"><meta name="twitter:card" content="summary_large_image"><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "Article", "headline": "Service accounts overview" } </script><script type="application/ld+json"> { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [{ "@type": "ListItem", "position": 1, "name": "IAM", "item": "https://cloud.google.com/iam" },{ "@type": "ListItem", "position": 2, "name": "Documentation", "item": "https://cloud.google.com/iam/docs" },{ "@type": "ListItem", "position": 3, "name": "Service accounts overview", "item": "https://cloud.google.com/iam/docs/service-account-overview" }] } </script> <link rel="stylesheet" href="/extras.css"></head> <body class="" template="page" theme="cloud-theme" type="article" layout="docs" free-trial display-toc pending> <devsite-progress type="indeterminate" id="app-progress"></devsite-progress> <a href="#main-content" class="skip-link button"> Skip to main content </a> <section class="devsite-wrapper"> <devsite-cookie-notification-bar></devsite-cookie-notification-bar><cloudx-track userCountry="SG"></cloudx-track> <cloudx-utils-init></cloudx-utils-init> <devsite-header keep-tabs-visible> <div class="devsite-header--inner nocontent"> <div class="devsite-top-logo-row-wrapper-wrapper"> <div class="devsite-top-logo-row-wrapper"> <div class="devsite-top-logo-row"> <button type="button" id="devsite-hamburger-menu" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Navigation menu button" visually-hidden aria-label="Open menu"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> <div class="devsite-top-logo-row-middle"> <div class="devsite-header-upper-tabs"> <cloudx-tabs-nav class="upper-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Upper tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/docs" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs" track-type="nav" track-metadata-position="nav - docs-home" track-metadata-module="primary nav" aria-label="Documentation, selected" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" > Documentation </a> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/tech-area-overviews" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-type="nav" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > Technology areas </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Technology areas" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/tech-area-overviews" track-metadata-position="nav - technology-areas" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/ai-ml" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/ai-ml" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> AI and ML </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-development" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-development" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application development </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/application-hosting" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/application-hosting" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Application hosting </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/compute-area" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/compute-area" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Compute </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/data" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/data" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Data analytics and pipelines </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/databases" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/databases" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Databases </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/dhm-cloud" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/dhm-cloud" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Distributed, hybrid, and multicloud </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/generative-ai" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/generative-ai" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Generative AI </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/industry" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/industry" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Industry solutions </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/networking" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/networking" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Networking </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/observability" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/observability" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Observability and monitoring </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/security" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/security" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Security </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/storage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/storage" track-metadata-position="nav - technology-areas" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Storage </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/docs/cross-product-overviews" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-type="nav" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > Cross-product tools </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Cross-product tools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/cross-product-overviews" track-metadata-position="nav - crossproduct" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/access-resources" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/access-resources" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Access and resources management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/costs-usage" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/costs-usage" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Costs and usage management </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/devtools" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/devtools" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud SDK, languages, frameworks, and tools </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/iac" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/iac" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Infrastructure as code </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/docs/migration" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/docs/migration" track-metadata-position="nav - crossproduct" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Migration </div> </a> </li> </ul> </div> </div> </div> </tab> <tab class="devsite-dropdown devsite-clickable "> <a href="https://cloud.google.com/" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/" track-type="nav" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > Related sites </a> <button aria-haspopup="menu" aria-expanded="false" aria-label="Dropdown menu for Related sites" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" class="devsite-tabs-dropdown-toggle devsite-icon devsite-icon-arrow-drop-down"></button> <div class="devsite-tabs-dropdown" role="menu" aria-label="submenu" hidden> <button class="devsite-tabs-close-button material-icons button-flat gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close dropdown menu" aria-label="Close dropdown menu" track-type="nav" track-name="close" track-metadata-eventdetail="#" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav">close</button> <div class="devsite-tabs-dropdown-content"> <div class="devsite-tabs-dropdown-column "> <ul class="devsite-tabs-dropdown-section "> <li class="devsite-nav-item"> <a href="https://cloud.google.com/" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Home </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/free" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/free" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Free Trial and Free Tier </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/architecture" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/architecture" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Architecture Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/blog" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Blog </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/contact" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/contact" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Contact Sales </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/developers" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/developers" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" track-type="nav" track-metadata-eventdetail="https://developers.google.com/" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Developer Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" track-type="nav" track-metadata-eventdetail="https://console.cloud.google.com/marketplace" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/marketplace/docs" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/marketplace/docs" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Marketplace Documentation </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" track-type="nav" track-metadata-eventdetail="https://www.cloudskillsboost.google/paths" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Skills Boost </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/solutions" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/solutions" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Solution Center </div> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/support-hub" track-type="nav" track-metadata-eventdetail="https://cloud.google.com/support-hub" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Support </div> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" track-type="nav" track-metadata-eventdetail="https://www.youtube.com/@googlecloudtech" track-metadata-position="nav - related-sites" track-metadata-module="tertiary nav" tooltip > <div class="devsite-nav-item-title"> Google Cloud Tech Youtube Channel </div> </a> </li> </ul> </div> </div> </div> </tab> </nav> </cloudx-tabs-nav> </div> <devsite-search enable-signin enable-search enable-suggestions project-name="IAM Documentation" tenant-name="Google Cloud" project-scope="/iam/docs" url-scoped="https://cloud.google.com/s/results/iam/docs" > <form class="devsite-search-form" action="https://cloud.google.com/s/results" method="GET"> <div class="devsite-search-container"> <button type="button" search-open class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Open search"></button> <div class="devsite-searchbox"> <input aria-activedescendant="" aria-autocomplete="list" aria-label="Search" aria-expanded="false" aria-haspopup="listbox" autocomplete="off" class="devsite-search-field devsite-search-query" name="q" placeholder="Search" role="combobox" type="text" value="" > <div class="devsite-search-image material-icons" aria-hidden="true"> </div> <div class="devsite-search-shortcut-icon-container" aria-hidden="true"> <kbd class="devsite-search-shortcut-icon">/</kbd> </div> </div> </div> </form> <button type="button" search-close class="devsite-search-button devsite-header-icon-button button-flat material-icons" aria-label="Close search"></button> </devsite-search> </div> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> <devsite-user enable-profiles fp-auth id="devsite-user"> <span class="button devsite-top-button" aria-hidden="true" visually-hidden>Sign in</span> </devsite-user> </div> </div> </div> <div class="devsite-collapsible-section "> <div class="devsite-header-background"> <div class="devsite-product-id-row" hidden> <div class="devsite-product-description-row"> </div> </div> <div class="devsite-doc-set-nav-row"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/iam" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Lower Header" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="IAM" > IAM </a> </li> </ul> <cloudx-tabs-nav class="lower-tabs"> <nav class="devsite-tabs-wrapper" aria-label="Lower tabs"> <tab class="devsite-active"> <a href="https://cloud.google.com/iam/docs/overview" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/iam/docs/overview" track-type="nav" track-metadata-position="nav - guides" track-metadata-module="primary nav" aria-label="Guides, selected" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" > Guides </a> </tab> <tab > <a href="https://cloud.google.com/iam/docs/apis" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/iam/docs/apis" track-type="nav" track-metadata-position="nav - reference" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" > Reference </a> </tab> <tab > <a href="https://cloud.google.com/iam/docs/samples" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/iam/docs/samples" track-type="nav" track-metadata-position="nav - samples" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" > Samples </a> </tab> <tab > <a href="https://cloud.google.com/iam/docs/resources" class="devsite-tabs-content gc-analytics-event " track-metadata-eventdetail="https://cloud.google.com/iam/docs/resources" track-type="nav" track-metadata-position="nav - resources" track-metadata-module="primary nav" data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" > Resources </a> </tab> </nav> </cloudx-tabs-nav> <div class="devsite-product-button-row"> <a href="https://cloud.google.com/contact" class="cta-button-secondary button " track-name="sales" track-type="contact" data-overflow="devsite-tabs-wrapper" track-metadata-eventDetail="nav" data-overflow-container="left" track-metadata-position="nav" data-overflow-wrapper="tab" >Contact Us</a> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary " data-overflow-container="right" data-overflow="devsite-top-logo-row" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" referrerpolicy="no-referrer-when-downgrade" track-metadata-position="nav" track-type="freeTrial" track-name="gcpCta" track-metadata-eventDetail="nav" >Start free</a> </div> </div> </div> </div> </div> </devsite-header> <devsite-book-nav scrollbars > <div class="devsite-book-nav-filter" > <span class="filter-list-icon material-icons" aria-hidden="true"></span> <input type="text" placeholder="Filter" aria-label="Type to filter" role="searchbox"> <span class="filter-clear-button hidden" data-title="Clear filter" aria-label="Clear filter" role="button" tabindex="0"></span> </div> <nav class="devsite-book-nav devsite-nav nocontent" aria-label="Side menu"> <div class="devsite-mobile-header"> <button type="button" id="devsite-close-nav" class="devsite-header-icon-button button-flat material-icons gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Close navigation" aria-label="Close navigation"> </button> <div class="devsite-product-name-wrapper"> <a href="/" class="devsite-site-logo-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Site logo" track-type="globalNav" track-name="googleCloud" track-metadata-position="nav" track-metadata-eventDetail="nav"> <picture> <img src="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg" class="devsite-site-logo" alt="Google Cloud"> </picture> </a> <span class="devsite-product-name"> <ul class="devsite-breadcrumb-list" > <li class="devsite-breadcrumb-item devsite-has-google-wordmark"> </li> </ul> </span> </div> </div> <div class="devsite-book-nav-wrapper"> <div class="devsite-mobile-nav-top"> <ul class="devsite-nav-list"> <li class="devsite-nav-item"> <a href="/docs" class="devsite-nav-title gc-analytics-event devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Documentation" track-name="docs-home" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Documentation" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Documentation </span> </a> <ul class="devsite-nav-responsive-tabs"> <li class="devsite-nav-item"> <a href="/iam/docs/overview" class="devsite-nav-title gc-analytics-event devsite-nav-has-children devsite-nav-active" data-category="Site-Wide Custom Events" data-label="Tab: Guides" track-name="guides" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Guides" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip menu="_book"> Guides </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="_book"> </span> </a> </li> <li class="devsite-nav-item"> <a href="/iam/docs/apis" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Reference" track-name="reference" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Reference" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Reference </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/iam/docs/samples" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Samples" track-name="samples" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Samples" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Samples </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> <li class="devsite-nav-item"> <a href="/iam/docs/resources" class="devsite-nav-title gc-analytics-event devsite-nav-has-children " data-category="Site-Wide Custom Events" data-label="Tab: Resources" track-name="resources" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Resources" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Resources </span> <span class="devsite-nav-icon material-icons" data-icon="forward" > </span> </a> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/tech-area-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Technology areas" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Technology areas </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Technology areas" track-name="technology-areas" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Technology areas"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Technology areas"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/docs/cross-product-overviews" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Cross-product tools" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Cross-product tools </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Cross-product tools" track-name="crossproduct" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Cross-product tools"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Cross-product tools"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Related sites" track-type="globalNav" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Related sites </span> </a> <ul class="devsite-nav-responsive-tabs devsite-nav-has-menu "> <li class="devsite-nav-item"> <span class="devsite-nav-title" tooltip data-category="Site-Wide Custom Events" data-label="Tab: Related sites" track-name="related-sites" track-link-column-type="single-column" > <span class="devsite-nav-text" tooltip menu="Related sites"> More </span> <span class="devsite-nav-icon material-icons" data-icon="forward" menu="Related sites"> </span> </span> </li> </ul> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/" class="devsite-nav-title gc-analytics-event " track-metadata-eventDetail="nav" referrerpolicy="no-referrer-when-downgrade" track-metadata-position="nav" track-type="globalNav" track-name="console" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Console" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Console </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="cta-button-secondary button" track-name="sales" track-type="contact" data-overflow="devsite-tabs-wrapper" track-metadata-eventDetail="nav" data-overflow-container="left" track-metadata-position="nav" data-overflow-wrapper="tab" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Us" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Us </span> </a> </li> <li class="devsite-nav-item"> <a href="//console.cloud.google.com/freetrial" class="cloud-free-trial-button cta-button-primary button-primary button cloud-button cloud-button--primary" data-overflow-container="right" data-overflow="devsite-top-logo-row" data-overflow-class="devsite-header-link devsite-top-button button cloud-free-trial-button cloud-free-trial-enabled cloud-button cloud-button--primary" referrerpolicy="no-referrer-when-downgrade" track-metadata-position="nav" track-type="freeTrial" track-name="gcpCta" track-metadata-eventDetail="nav" data-category="Site-Wide Custom Events" data-label="Responsive Tab: Start free" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Start free </span> </a> </li> </ul> </div> <div class="devsite-mobile-nav-bottom"> <ul class="devsite-nav-list" menu="_book"> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Discover</span> </div></li> <li class="devsite-nav-item"><a href="/iam/docs/overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/overview" ><span class="devsite-nav-text" tooltip>Product overview</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Get started</span> </div></li> <li class="devsite-nav-item"><a href="/iam/docs/grant-role-console" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/grant-role-console" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/grant-role-console" ><span class="devsite-nav-text" tooltip>Grant roles in the Google Cloud console</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/write-policy-client-libraries" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/write-policy-client-libraries" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/write-policy-client-libraries" ><span class="devsite-nav-text" tooltip>Grant roles using client libraries</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/iam-security-architecture" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/iam-security-architecture" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/iam-security-architecture" ><span class="devsite-nav-text" tooltip>IAM and your security architecture</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/google-identities" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/google-identities" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/google-identities" ><span class="devsite-nav-text" tooltip>Identity management for Google Cloud</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Configure identities for users</span> </div></li> <li class="devsite-nav-item"><a href="/iam/docs/user-identities" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/user-identities" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/user-identities" ><span class="devsite-nav-text" tooltip>Identities for users</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/groups-in-cloud-console" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/groups-in-cloud-console" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/groups-in-cloud-console" ><span class="devsite-nav-text" tooltip>Create and manage Google groups in the Google Cloud console</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/groups-best-practices" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/groups-best-practices" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/groups-best-practices" ><span class="devsite-nav-text" tooltip>Best practices for using Google groups</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Federate identities for users</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/workforce-identity-federation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-identity-federation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-identity-federation" ><span class="devsite-nav-text" tooltip>Workforce identity federation</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure Workforce Identity Federation</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/workforce-sign-in-microsoft-entra-id" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-sign-in-microsoft-entra-id" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-sign-in-microsoft-entra-id" ><span class="devsite-nav-text" tooltip>Microsoft Entra ID</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workforce-sign-in-okta" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-sign-in-okta" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-sign-in-okta" ><span class="devsite-nav-text" tooltip>Okta</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/configuring-workforce-identity-federation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/configuring-workforce-identity-federation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/configuring-workforce-identity-federation" ><span class="devsite-nav-text" tooltip>Other OIDC or SAML 2.0</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workforce-sign-in-power-bi" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-sign-in-power-bi" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-sign-in-power-bi" ><span class="devsite-nav-text" tooltip>Access BigQuery data in Power BI with Microsoft Entra</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/iam/docs/workforce-obtaining-short-lived-credentials" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-obtaining-short-lived-credentials" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-obtaining-short-lived-credentials" ><span class="devsite-nav-text" tooltip>Obtain short-lived credentials for Workforce Identity Federation</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/manage-workforce-identity-pools-providers" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/manage-workforce-identity-pools-providers" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/manage-workforce-identity-pools-providers" ><span class="devsite-nav-text" tooltip>Manage workforce identity pools and providers</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workforce-delete-user-data" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-delete-user-data" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-delete-user-data" ><span class="devsite-nav-text" tooltip>Delete Workforce Identity Federation users and their data</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workforce-console-sso" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-console-sso" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-console-sso" ><span class="devsite-nav-text" tooltip>Set up user access to console (federated)</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Integrate OAuth applications</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/workforce-oauth-app" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-oauth-app" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-oauth-app" ><span class="devsite-nav-text" tooltip>OAuth application integration overview</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workforce-manage-oauth-app" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workforce-manage-oauth-app" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workforce-manage-oauth-app" ><span class="devsite-nav-text" tooltip>Manage OAuth applications</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Configure identities for workloads</span> </div></li> <li class="devsite-nav-item"><a href="/iam/docs/workload-identities" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identities" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identities" ><span class="devsite-nav-text" tooltip>Identities for workloads</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create and manage service accounts</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>About service accounts</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/service-account-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-account-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-account-overview" ><span class="devsite-nav-text" tooltip>Service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-account-creds" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-account-creds" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-account-creds" ><span class="devsite-nav-text" tooltip>Service account credentials</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-account-impersonation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-account-impersonation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-account-impersonation" ><span class="devsite-nav-text" tooltip>Service account impersonation</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-account-types" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-account-types" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-account-types" ><span class="devsite-nav-text" tooltip>Service account types</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-account-permissions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-account-permissions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-account-permissions" ><span class="devsite-nav-text" tooltip>Roles for service account authentication</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-preview"><a href="/iam/docs/create-service-agents" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/create-service-agents" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/create-service-agents" ><span class="devsite-nav-text" tooltip>Create and grant roles to service agents</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-accounts-create" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-accounts-create" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-accounts-create" ><span class="devsite-nav-text" tooltip>Create service accounts</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Manage service accounts</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/service-accounts-list-edit" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-accounts-list-edit" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-accounts-list-edit" ><span class="devsite-nav-text" tooltip>List and edit service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-accounts-disable-enable" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-accounts-disable-enable" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-accounts-disable-enable" ><span class="devsite-nav-text" tooltip>Disable and enable service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-accounts-delete-undelete" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-accounts-delete-undelete" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-accounts-delete-undelete" ><span class="devsite-nav-text" tooltip>Delete and undelete service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-accounts-tags" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-accounts-tags" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-accounts-tags" ><span class="devsite-nav-text" tooltip>Manage tags for service accounts</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/iam/docs/attach-service-accounts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/attach-service-accounts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/attach-service-accounts" ><span class="devsite-nav-text" tooltip>Attach service accounts to resources</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-accounts-custom-constraints" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-accounts-custom-constraints" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-accounts-custom-constraints" ><span class="devsite-nav-text" tooltip>Use custom organization policies for service accounts and keys</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Service account best practices</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/best-practices-service-accounts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/best-practices-service-accounts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/best-practices-service-accounts" ><span class="devsite-nav-text" tooltip>Best practices for using service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/best-practices-for-using-service-accounts-in-deployment-pipelines" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/best-practices-for-using-service-accounts-in-deployment-pipelines" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/best-practices-for-using-service-accounts-in-deployment-pipelines" ><span class="devsite-nav-text" tooltip>Best practices for using service accounts in deployment pipelines</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable devsite-nav-preview"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create managed workload identities</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item devsite-nav-preview"><a href="/iam/docs/managed-workload-identity" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/managed-workload-identity" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/managed-workload-identity" ><span class="devsite-nav-text" tooltip>About managed workload identities</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/iam/docs/create-managed-workload-identities" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/create-managed-workload-identities" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/create-managed-workload-identities" ><span class="devsite-nav-text" tooltip>Create managed workload identities</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Federate identities for external workloads</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/workload-identity-federation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identity-federation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identity-federation" ><span class="devsite-nav-text" tooltip>Workload Identity Federation</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Configure Workload Identity Federation</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/workload-identity-federation-with-other-clouds" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identity-federation-with-other-clouds" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identity-federation-with-other-clouds" ><span class="devsite-nav-text" tooltip>AWS or Azure</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workload-identity-federation-with-active-directory" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identity-federation-with-active-directory" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identity-federation-with-active-directory" ><span class="devsite-nav-text" tooltip>Active Directory</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workload-identity-federation-with-deployment-pipelines" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identity-federation-with-deployment-pipelines" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identity-federation-with-deployment-pipelines" ><span class="devsite-nav-text" tooltip>Deployment pipelines</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workload-identity-federation-with-kubernetes" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identity-federation-with-kubernetes" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identity-federation-with-kubernetes" ><span class="devsite-nav-text" tooltip>Kubernetes</span></a></li><li class="devsite-nav-item devsite-nav-preview"><a href="/iam/docs/workload-identity-federation-with-x509-certificates" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identity-federation-with-x509-certificates" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identity-federation-with-x509-certificates" ><span class="devsite-nav-text" tooltip>Workloads with X.509 certificates</span><span class="devsite-nav-icon material-icons" data-icon="preview" data-title="Preview" aria-hidden="true"></span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workload-identity-federation-with-other-providers" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-identity-federation-with-other-providers" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-identity-federation-with-other-providers" ><span class="devsite-nav-text" tooltip>Other identity providers</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/iam/docs/manage-workload-identity-pools-providers" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/manage-workload-identity-pools-providers" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/manage-workload-identity-pools-providers" ><span class="devsite-nav-text" tooltip>Manage workload identity pools and providers</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/best-practices-for-using-workload-identity-federation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/best-practices-for-using-workload-identity-federation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/best-practices-for-using-workload-identity-federation" ><span class="devsite-nav-text" tooltip>Best practices for using Workload Identity Federation</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/use-workload-identity-federation-to-let-customers-access-their-cloud-resources" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/use-workload-identity-federation-to-let-customers-access-their-cloud-resources" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/use-workload-identity-federation-to-let-customers-access-their-cloud-resources" ><span class="devsite-nav-text" tooltip>Let customers access their Google Cloud resources from your product or service</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/workload-download-cred-and-grant-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/workload-download-cred-and-grant-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/workload-download-cred-and-grant-access" ><span class="devsite-nav-text" tooltip>Download credential configuration and grant access</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/tutorial-cloud-run-workload-id-federation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/tutorial-cloud-run-workload-id-federation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/tutorial-cloud-run-workload-id-federation" ><span class="devsite-nav-text" tooltip>Integrate Cloud Run and Workload Identity Federation</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create and manage service account keys</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/migrate-from-service-account-keys" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/migrate-from-service-account-keys" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/migrate-from-service-account-keys" ><span class="devsite-nav-text" tooltip>Migrate from service account keys</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/key-rotation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/key-rotation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/key-rotation" ><span class="devsite-nav-text" tooltip>Service account key rotation</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/keys-create-delete" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/keys-create-delete" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/keys-create-delete" ><span class="devsite-nav-text" tooltip>Create and delete service account keys</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/keys-list-get" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/keys-list-get" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/keys-list-get" ><span class="devsite-nav-text" tooltip>List and get service account keys</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/keys-upload" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/keys-upload" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/keys-upload" ><span class="devsite-nav-text" tooltip>Upload a public key</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/keys-disable-enable" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/keys-disable-enable" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/keys-disable-enable" ><span class="devsite-nav-text" tooltip>Disable and enable service account keys</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/best-practices-for-managing-service-account-keys" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/best-practices-for-managing-service-account-keys" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/best-practices-for-managing-service-account-keys" ><span class="devsite-nav-text" tooltip>Best practices for managing service account keys</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/iam/docs/built-in-resource-identities" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/built-in-resource-identities" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/built-in-resource-identities" ><span class="devsite-nav-text" tooltip>Built-in identities for resources</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Control access to resources</span> </div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>About IAM access controls</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/roles-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/roles-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/roles-overview" ><span class="devsite-nav-text" tooltip>Roles and permissions</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/principals-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/principals-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/principals-overview" ><span class="devsite-nav-text" tooltip>Principals</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/policy-types" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/policy-types" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/policy-types" ><span class="devsite-nav-text" tooltip>Policy types</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/policies" ><span class="devsite-nav-text" tooltip>Allow policies</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/resource-hierarchy-access-control" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/resource-hierarchy-access-control" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/resource-hierarchy-access-control" ><span class="devsite-nav-text" tooltip>Allow policy inheritance</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/deny-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/deny-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/deny-overview" ><span class="devsite-nav-text" tooltip>Deny policies</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/principal-access-boundary-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/principal-access-boundary-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/principal-access-boundary-policies" ><span class="devsite-nav-text" tooltip>Principal access boundary policies</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/access-change-propagation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/access-change-propagation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/access-change-propagation" ><span class="devsite-nav-text" tooltip>Access change propagation</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/conditions-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/conditions-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/conditions-overview" ><span class="devsite-nav-text" tooltip>IAM Conditions</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Choose roles to grant</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/choose-predefined-roles" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/choose-predefined-roles" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/choose-predefined-roles" ><span class="devsite-nav-text" tooltip>Choose predefined roles</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/viewing-grantable-roles" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/viewing-grantable-roles" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/viewing-grantable-roles" ><span class="devsite-nav-text" tooltip>View grantable roles</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Roles for specific job functions</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/job-functions/billing" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/job-functions/billing" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/job-functions/billing" ><span class="devsite-nav-text" tooltip>Billing-related job functions</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/job-functions/networking" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/job-functions/networking" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/job-functions/networking" ><span class="devsite-nav-text" tooltip>Networking-related job functions</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/job-functions/auditing" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/job-functions/auditing" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/job-functions/auditing" ><span class="devsite-nav-text" tooltip>Auditing-related job functions</span></a></li></ul></div></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Create and manage custom roles</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/creating-custom-roles" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/creating-custom-roles" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/creating-custom-roles" ><span class="devsite-nav-text" tooltip>Create and manage custom roles</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/maintain-custom-roles-deployment-manager" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/maintain-custom-roles-deployment-manager" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/maintain-custom-roles-deployment-manager" ><span class="devsite-nav-text" tooltip>Use Deployment Manager to maintain custom roles</span></a></li></ul></div></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Grant access</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/granting-changing-revoking-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/granting-changing-revoking-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/granting-changing-revoking-access" ><span class="devsite-nav-text" tooltip>Manage access to projects, folders, and organizations</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/manage-access-service-accounts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/manage-access-service-accounts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/manage-access-service-accounts" ><span class="devsite-nav-text" tooltip>Manage access to service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/manage-access-other-resources" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/manage-access-other-resources" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/manage-access-other-resources" ><span class="devsite-nav-text" tooltip>Manage access to other resources</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/test-policy-changes" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/test-policy-changes" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/test-policy-changes" ><span class="devsite-nav-text" tooltip>Test allow policy changes</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Grant access conditionally</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/managing-conditional-role-bindings" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/managing-conditional-role-bindings" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/managing-conditional-role-bindings" ><span class="devsite-nav-text" tooltip>Manage conditional role bindings</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/configuring-temporary-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/configuring-temporary-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/configuring-temporary-access" ><span class="devsite-nav-text" tooltip>Configure temporary access</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/configuring-resource-based-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/configuring-resource-based-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/configuring-resource-based-access" ><span class="devsite-nav-text" tooltip>Configure resource-based access</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/tags-access-control" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/tags-access-control" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/tags-access-control" ><span class="devsite-nav-text" tooltip>Tags and conditional access</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/setting-limits-on-granting-roles" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/setting-limits-on-granting-roles" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/setting-limits-on-granting-roles" ><span class="devsite-nav-text" tooltip>Set limits on granting roles</span></a></li><li class="devsite-nav-item devsite-nav-alpha"><a href="/iam/docs/linting-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/linting-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/linting-policies" ><span class="devsite-nav-text" tooltip>Lint conditions in allow policies</span><span class="devsite-nav-icon material-icons" data-icon="alpha" data-title="Alpha" aria-hidden="true"></span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/iam/docs/deny-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/deny-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/deny-access" ><span class="devsite-nav-text" tooltip>Deny access</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Restrict the resources that a principal can access</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/principal-access-boundary-policies-create" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/principal-access-boundary-policies-create" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/principal-access-boundary-policies-create" ><span class="devsite-nav-text" tooltip>Create and apply principal access boundary policies</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/principal-access-boundary-policies-view" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/principal-access-boundary-policies-view" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/principal-access-boundary-policies-view" ><span class="devsite-nav-text" tooltip>View principal access boundary policies</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/principal-access-boundary-policies-edit" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/principal-access-boundary-policies-edit" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/principal-access-boundary-policies-edit" ><span class="devsite-nav-text" tooltip>Edit principal access boundary policies</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/principal-access-boundary-policies-remove" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/principal-access-boundary-policies-remove" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/principal-access-boundary-policies-remove" ><span class="devsite-nav-text" tooltip>Remove principal access boundary policies</span></a></li></ul></div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Temporary elevated access</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/temporary-elevated-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/temporary-elevated-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/temporary-elevated-access" ><span class="devsite-nav-text" tooltip>Temporary elevated access overview</span></a></li><li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Control temporary elevated access with PAM</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/pam-overview" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-overview" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-overview" ><span class="devsite-nav-text" tooltip>PAM overview</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/pam-permissions-and-setup" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-permissions-and-setup" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-permissions-and-setup" ><span class="devsite-nav-text" tooltip>Permissions and setup</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/pam-create-entitlements" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-create-entitlements" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-create-entitlements" ><span class="devsite-nav-text" tooltip>Create entitlements</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/pam-view-update-delete-entitlements" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-view-update-delete-entitlements" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-view-update-delete-entitlements" ><span class="devsite-nav-text" tooltip>View, update, and delete entitlements</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/pam-view-grants" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-view-grants" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-view-grants" ><span class="devsite-nav-text" tooltip>View grants</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/pam-revoke-grants" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-revoke-grants" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-revoke-grants" ><span class="devsite-nav-text" tooltip>Revoke grants</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/pam-audit-entitlement-events" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-audit-entitlement-events" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-audit-entitlement-events" ><span class="devsite-nav-text" tooltip>Audit entitlement and grant events</span></a></li></ul></div></li><li class="devsite-nav-item"><a href="/iam/docs/pam-request-temporary-elevated-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-request-temporary-elevated-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-request-temporary-elevated-access" ><span class="devsite-nav-text" tooltip>Request temporary elevated access with PAM</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/pam-approve-deny-grants" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/pam-approve-deny-grants" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/pam-approve-deny-grants" ><span class="devsite-nav-text" tooltip>Approve or deny grants with PAM</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/create-short-lived-credentials-direct" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/create-short-lived-credentials-direct" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/create-short-lived-credentials-direct" ><span class="devsite-nav-text" tooltip>Create short-lived credentials for a service account</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/create-short-lived-credentials-delegated" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/create-short-lived-credentials-delegated" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/create-short-lived-credentials-delegated" ><span class="devsite-nav-text" tooltip>Create short-lived credentials for multiple service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/downscoping-short-lived-credentials" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/downscoping-short-lived-credentials" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/downscoping-short-lived-credentials" ><span class="devsite-nav-text" tooltip>Restrict a credential's Cloud Storage permissions</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/migrating-to-credentials-api" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/migrating-to-credentials-api" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/migrating-to-credentials-api" ><span class="devsite-nav-text" tooltip>Migrate to the Service Account Credentials API</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/iam/docs/testing-permissions" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/testing-permissions" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/testing-permissions" ><span class="devsite-nav-text" tooltip>Test permissions for custom user interfaces</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/org-policy-custom-constraints" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/org-policy-custom-constraints" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/org-policy-custom-constraints" ><span class="devsite-nav-text" tooltip>Use custom organization policies for allow policies</span></a></li> <li class="devsite-nav-item"><a href="/solutions/help-secure-the-pipeline-from-your-data-lake-to-your-data-warehouse" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /solutions/help-secure-the-pipeline-from-your-data-lake-to-your-data-warehouse" track-type="bookNav" track-name="click" track-metadata-eventdetail="/solutions/help-secure-the-pipeline-from-your-data-lake-to-your-data-warehouse" ><span class="devsite-nav-text" tooltip>Use IAM to help prevent exfiltration from data pipelines</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Optimize your IAM configuration</span> </div></li> <li class="devsite-nav-item"><a href="/iam/docs/using-iam-securely" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/using-iam-securely" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/using-iam-securely" ><span class="devsite-nav-text" tooltip>Use IAM securely</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/policy-intelligence-tools" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/policy-intelligence-tools" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/policy-intelligence-tools" ><span class="devsite-nav-text" tooltip>Optimize IAM policies by using Policy Intelligence tools</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/secure-iam-vpc-sc" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/secure-iam-vpc-sc" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/secure-iam-vpc-sc" ><span class="devsite-nav-text" tooltip>Help secure IAM using VPC Service Controls</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Monitor</span> </div></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Audit logging</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/audit-logging" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging" ><span class="devsite-nav-text" tooltip>IAM API audit logging</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/audit-logging/audit-logging-iamcreds" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging/audit-logging-iamcreds" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging/audit-logging-iamcreds" ><span class="devsite-nav-text" tooltip>Service Account Credentials API audit logging</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/audit-logging/audit-logging-pam" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging/audit-logging-pam" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging/audit-logging-pam" ><span class="devsite-nav-text" tooltip>Privileged Access Manager audit logging</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/audit-logging/audit-logging-sts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging/audit-logging-sts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging/audit-logging-sts" ><span class="devsite-nav-text" tooltip>Security Token Service API audit logging</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/audit-logging/examples-service-accounts" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging/examples-service-accounts" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging/examples-service-accounts" ><span class="devsite-nav-text" tooltip>Example logs for service accounts</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/audit-logging/examples-workforce-identity" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging/examples-workforce-identity" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging/examples-workforce-identity" ><span class="devsite-nav-text" tooltip>Example logs for Workforce Identity Federation</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/audit-logging/examples-oauth-clients" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging/examples-oauth-clients" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging/examples-oauth-clients" ><span class="devsite-nav-text" tooltip>Example logs for Workforce OAuth application integration</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/audit-logging/examples-workload-identity" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/audit-logging/examples-workload-identity" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/audit-logging/examples-workload-identity" ><span class="devsite-nav-text" tooltip>Example logs for Workload Identity Federation</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/iam/docs/analyze-access" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/analyze-access" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/analyze-access" ><span class="devsite-nav-text" tooltip>Analyze access to resources</span></a></li> <li class="devsite-nav-item devsite-nav-expandable"><div class="devsite-expandable-nav"> <a class="devsite-nav-toggle" aria-hidden="true"></a><div class="devsite-nav-title devsite-nav-title-no-path" tabindex="0" role="button"> <span class="devsite-nav-text" tooltip>Monitor service account usage</span> </div><ul class="devsite-nav-section"><li class="devsite-nav-item"><a href="/iam/docs/service-account-usage-tools" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-account-usage-tools" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-account-usage-tools" ><span class="devsite-nav-text" tooltip>Tools to understand service account usage</span></a></li><li class="devsite-nav-item"><a href="/iam/docs/service-account-monitoring" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/service-account-monitoring" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/service-account-monitoring" ><span class="devsite-nav-text" tooltip>Monitor usage patterns for service accounts and keys</span></a></li></ul></div></li> <li class="devsite-nav-item"><a href="/iam/docs/review-iam-policy-history" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/review-iam-policy-history" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/review-iam-policy-history" ><span class="devsite-nav-text" tooltip>Review allow policy history</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Troubleshoot</span> </div></li> <li class="devsite-nav-item"><a href="/iam/docs/troubleshoot-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/troubleshoot-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/troubleshoot-policies" ><span class="devsite-nav-text" tooltip>Troubleshoot allow and deny policies</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/troubleshoot-org-policies" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/troubleshoot-org-policies" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/troubleshoot-org-policies" ><span class="devsite-nav-text" tooltip>Troubleshoot organization policy errors for service accounts</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/troubleshooting-withcond" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/troubleshooting-withcond" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/troubleshooting-withcond" ><span class="devsite-nav-text" tooltip>Troubleshoot "withcond" in policies and role bindings</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/troubleshooting-workforce-identity-federation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/troubleshooting-workforce-identity-federation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/troubleshooting-workforce-identity-federation" ><span class="devsite-nav-text" tooltip>Troubleshoot Workforce Identity Federation</span></a></li> <li class="devsite-nav-item"><a href="/iam/docs/troubleshooting-workload-identity-federation" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/troubleshooting-workload-identity-federation" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/troubleshooting-workload-identity-federation" ><span class="devsite-nav-text" tooltip>Troubleshoot Workload Identity Federation</span></a></li> <li class="devsite-nav-item devsite-nav-heading"><div class="devsite-nav-title devsite-nav-title-no-path"> <span class="devsite-nav-text" tooltip>Samples</span> </div></li> <li class="devsite-nav-item"><a href="/iam/docs/samples" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /iam/docs/samples" track-type="bookNav" track-name="click" track-metadata-eventdetail="/iam/docs/samples" ><span class="devsite-nav-text" tooltip>All Identity and Access Management code samples</span></a></li> <li class="devsite-nav-item"><a href="/docs/samples" class="devsite-nav-title gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Book nav link, pathname: /docs/samples" track-type="bookNav" track-name="click" track-metadata-eventdetail="/docs/samples" ><span class="devsite-nav-text" tooltip>Code samples for all products</span></a></li> </ul> <ul class="devsite-nav-list" menu="Technology areas" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/ai-ml" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: AI and ML" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > AI and ML </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-development" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application development" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application development </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/application-hosting" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Application hosting" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Application hosting </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/compute-area" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Compute" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Compute </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/data" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Data analytics and pipelines" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Data analytics and pipelines </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/databases" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Databases" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Databases </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/dhm-cloud" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Distributed, hybrid, and multicloud" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Distributed, hybrid, and multicloud </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/generative-ai" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Generative AI" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Generative AI </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/industry" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Industry solutions" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Industry solutions </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/networking" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Networking" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Networking </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/observability" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Observability and monitoring" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Observability and monitoring </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/security" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Security" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Security </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/storage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Storage" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Storage </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Cross-product tools" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/docs/access-resources" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Access and resources management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Access and resources management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/costs-usage" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Costs and usage management" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Costs and usage management </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/devtools" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud SDK, languages, frameworks, and tools" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud SDK, languages, frameworks, and tools </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/iac" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Infrastructure as code" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Infrastructure as code </span> </a> </li> <li class="devsite-nav-item"> <a href="/docs/migration" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Migration" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Migration </span> </a> </li> </ul> <ul class="devsite-nav-list" menu="Related sites" aria-label="Side menu" hidden> <li class="devsite-nav-item"> <a href="/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Home" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Home </span> </a> </li> <li class="devsite-nav-item"> <a href="/free" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Free Trial and Free Tier" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Free Trial and Free Tier </span> </a> </li> <li class="devsite-nav-item"> <a href="/architecture" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Architecture Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Architecture Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://cloud.google.com/blog" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Blog" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Blog </span> </a> </li> <li class="devsite-nav-item"> <a href="/contact" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Contact Sales" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Contact Sales </span> </a> </li> <li class="devsite-nav-item"> <a href="/developers" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://developers.google.com/" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Developer Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Developer Center </span> </a> </li> <li class="devsite-nav-item"> <a href="https://console.cloud.google.com/marketplace" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace </span> </a> </li> <li class="devsite-nav-item"> <a href="/marketplace/docs" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Marketplace Documentation" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Marketplace Documentation </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.cloudskillsboost.google/paths" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Skills Boost" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Skills Boost </span> </a> </li> <li class="devsite-nav-item"> <a href="/solutions" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Solution Center" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Solution Center </span> </a> </li> <li class="devsite-nav-item"> <a href="/support-hub" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Support" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Support </span> </a> </li> <li class="devsite-nav-item"> <a href="https://www.youtube.com/@googlecloudtech" class="devsite-nav-title gc-analytics-event " data-category="Site-Wide Custom Events" data-label="Responsive Tab: Google Cloud Tech Youtube Channel" track-type="navMenu" track-metadata-eventDetail="globalMenu" track-metadata-position="nav"> <span class="devsite-nav-text" tooltip > Google Cloud Tech Youtube Channel </span> </a> </li> </ul> </div> </div> </nav> </devsite-book-nav> <section id="gc-wrapper"> <main role="main" id="main-content" class="devsite-main-content" has-book-nav has-sidebar > <div class="devsite-sidebar"> <div class="devsite-sidebar-content"> <devsite-toc class="devsite-nav" role="navigation" aria-label="On this page" depth="2" scrollbars ></devsite-toc> <devsite-recommendations-sidebar class="nocontent devsite-nav"> </devsite-recommendations-sidebar> </div> </div> <devsite-content> <article class="devsite-article"> <div class="devsite-article-meta nocontent" role="navigation"> <ul class="devsite-breadcrumb-list" aria-label="Breadcrumb"> <li class="devsite-breadcrumb-item "> <a href="https://cloud.google.com/" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="1" track-type="globalNav" track-name="breadcrumb" track-metadata-position="1" track-metadata-eventdetail="Google Cloud" > Home </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/iam" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="2" track-type="globalNav" track-name="breadcrumb" track-metadata-position="2" track-metadata-eventdetail="IAM" > IAM </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/iam/docs" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="3" track-type="globalNav" track-name="breadcrumb" track-metadata-position="3" track-metadata-eventdetail="IAM Documentation" > Documentation </a> </li> <li class="devsite-breadcrumb-item "> <div class="devsite-breadcrumb-guillemet material-icons" aria-hidden="true"></div> <a href="https://cloud.google.com/iam/docs/overview" class="devsite-breadcrumb-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Breadcrumbs" data-value="4" track-type="globalNav" track-name="breadcrumb" track-metadata-position="4" track-metadata-eventdetail="" > Guides </a> </li> </ul> <devsite-thumb-rating position="header"> </devsite-thumb-rating> </div> <devsite-feedback position="header" project-name="IAM Documentation" product-id="717553" bucket="documentation" context="" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="header" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <h1 class="devsite-page-title" tabindex="-1"> Service accounts overview </h1> <devsite-feature-tooltip ack-key="AckCollectionsBookmarkTooltipDismiss" analytics-category="Site-Wide Custom Events" analytics-action-show="Callout Profile displayed" analytics-action-close="Callout Profile dismissed" analytics-label="Create Collection Callout" class="devsite-page-bookmark-tooltip nocontent" dismiss-button="true" id="devsite-collections-dropdown" dismiss-button-text="Dismiss" close-button-text="Got it"> <devsite-bookmark></devsite-bookmark> <span slot="popout-heading"> Stay organized with collections </span> <span slot="popout-contents"> Save and categorize content based on your preferences. </span> </devsite-feature-tooltip> <div class="devsite-page-title-meta"><devsite-view-release-notes></devsite-view-release-notes></div> <devsite-toc class="devsite-nav" depth="2" devsite-toc-embedded > </devsite-toc> <div class="devsite-article-body clearfix "> <div class="video-wrapper"> <devsite-video video-id="xXk1YlkKW_k" data-showinfo="0"></devsite-video> </div> <p>This page explains what service accounts are and describes important considerations for managing your service accounts at each stage of their lifecycle.</p> <h2 id="what-are-service-accounts" data-text="What are service accounts?" tabindex="-1">What are service accounts?</h2> <p>A service account is a special kind of account typically used by an application or compute workload, such as a Compute Engine instance, rather than a person. A service account is identified by its email address, which is unique to the account.</p> <p>Applications use service accounts to make <a href="https://developers.google.com/identity/protocols/OAuth2ServiceAccount#authorizingrequests">authorized API calls</a> by authenticating as either the service account itself, or as Google Workspace or Cloud Identity users through <a href="https://developers.google.com/identity/protocols/oauth2/service-account#delegatingauthority">domain-wide delegation</a>. When an application authenticates as a service account, it has access to all resources that the service account has permission to access.</p> <p>The most common way to let an application authenticate as a service account is to <a href="/iam/docs/attach-service-accounts">attach a service account</a> to the resource running the application. For example, you can attach a service account to a Compute Engine instance so that applications running on that instance can authenticate as the service account. Then, you can grant the service account IAM roles to let the service account—and, by extension, applications on the instance—access Google Cloud resources.</p> <p>There are other ways to let applications authenticate as service accounts besides attaching a service account. For example, you could set up <a href="/iam/docs/workload-identity-federation">Workload Identity Federation</a> to allow external workloads to authenticate as service accounts, or create a <a href="/iam/docs/service-account-creds#user-managed-keys">service account key</a> and use it in any environment to obtain OAuth 2.0 access tokens.</p> <aside class="caution"><strong>Caution:</strong><span> Service account keys are a security risk if not managed correctly. You should <a href="/docs/authentication#auth-decision-tree"> choose a more secure alternative to service account keys</a> whenever possible. If you must authenticate with a service account key, you are responsible for the security of the private key and for other operations described by <a href="/iam/docs/best-practices-for-managing-service-account-keys"> Best practices for managing service account keys</a>. If you are prevented from creating a service account key, service account key creation might be disabled for your organization. For more information, see <a href="/resource-manager/docs/secure-by-default-organizations"> Managing secure-by-default organization resources</a>. <p> If you acquired the service account key from an external source, you must validate it before use. For more information, see <a href="/docs/authentication/external/externally-sourced-credentials"> Security requirements for externally sourced credentials</a>. </p> </span></aside> <p>To learn more about service account authentication for applications, see <a href="/iam/docs/workload-identities">Overview of identities for workloads</a>.</p> <p>Principals, such as users and other service accounts, can also authenticate as service accounts. For more information, see <a href="#impersonation">Service account impersonation</a> on this page.</p> <h3 id="types" data-text="Types of service accounts" tabindex="-1">Types of service accounts</h3> <p>In Google Cloud, there are several different types of service accounts:</p> <ul> <li><p><strong>User-managed service accounts</strong>: Service accounts that you create and manage. These service accounts are often used as <a href="/iam/docs/workload-identities">identities for workloads</a>.</p></li> <li><p><strong>Default service accounts</strong>: User-managed service accounts that are created automatically when you enable certain Google Cloud services. You are responsible for managing these service accounts.</p></li> <li><p><strong>Service agents</strong>: Service accounts that are created and managed by Google Cloud, and that allow services to access resources on your behalf.</p></li> </ul> <p>To learn more about the different types of service accounts, see <a href="/iam/docs/service-account-types">Types of service accounts</a>.</p> <h3 id="credentials" data-text="Service account credentials" tabindex="-1">Service account credentials</h3> <p>Applications and principals authenticate as a service account by doing one of the following:</p> <ul> <li>Obtaining short-lived credentials. In many cases, such as attached service accounts and commands using the gcloud CLI <code translate="no" dir="ltr">--impersonate-service-account</code> flag, these credentials are obtained automatically—you don't need to create or manage them yourself.</li> <li>Using a service account key to sign a JSON Web Token (JWT) and exchanging it for an access token. Because service account keys are a security risk if not managed correctly, you should choose a <a href="/docs/authentication#auth-decision-tree">more secure alternative to service account keys</a> whenever possible.</li> </ul> <p>To learn more about service account authentication, see <a href="/iam/docs/service-account-creds">Service account credentials</a>.</p> <h3 id="impersonation" data-text="Service account impersonation" tabindex="-1">Service account impersonation</h3> <p> When an authenticated principal, such as a user or another service account, authenticates as a service account to gain the service account's permissions, it's called <em>impersonating</em> the service account. Impersonating a service account lets an authenticated principal access whatever the service account can access. Only authenticated principals with the appropriate permissions can impersonate service accounts. </p> <p> Impersonation is useful when you want to change a user's permissions without changing your Identity and Access Management (IAM) policies. For example, you can use impersonation to temporarily grant a user elevated access, or to test whether a specific set of permissions is sufficient for a task. You can also use impersonation to locally develop applications that can only run as a service account, or to authenticate applications that run outside of Google Cloud. </p> <p>To learn more about service account impersonation, see <a href="/iam/docs/service-account-impersonation">Service account impersonation</a>.</p> <h3 id="domains" data-text="Service accounts and Google Workspace domains" tabindex="-1">Service accounts and Google Workspace domains</h3> <p>Service accounts do <strong>not</strong> belong to your Google Workspace domain, unlike user accounts. If you share Google Workspace assets, like documents or events, with your entire Google Workspace domain, they are not shared with service accounts. Similarly, Google Workspace assets created by a service account are not created in your Google Workspace domain. As a result, your Google Workspace and Cloud Identity admins can't own or manage these assets.</p> <aside class="note"><strong>Note:</strong><span> Google Workspace assets that are created when using <a href="https://support.google.com/a/answer/162106">domain-wide delegation</a> <strong>are</strong> created in your Google Workspace domain, because API calls are authorized as the impersonated user, not the service account itself. </span></aside> <h2 id="service-account-permissions" data-text="Service account permissions" tabindex="-1">Service account permissions</h2> <p>Service accounts are <a href="/iam/docs/principals-overview">principals</a>. This means that you can grant service accounts access to Google Cloud resources. For example, you could grant a service account the Compute Admin role (<code translate="no" dir="ltr">roles/compute.admin</code>) on a project. Then, the service account would be able to manage Compute Engine resources in that project.</p> <p>However, service accounts are also <a href="/iam/docs/overview#resource">resources</a>. This means that you can give other principals permission to access the service account. For example, you could grant a user the Service Account User role (<code translate="no" dir="ltr">roles/iam.serviceAccountUser</code>) on a service account to let the user attach that service account to resources. Or, you could grant a user the Service Account Admin role (<code translate="no" dir="ltr">roles/iam.serviceAccountAdmin</code>) to let the user do things like view, edit, disable, and delete the service account.</p> <p>The following sections discuss how to manage service accounts as principals and as resources.</p> <h3 id="service-accounts-identities" data-text="Service accounts as principals" tabindex="-1">Service accounts as principals</h3> <p>Because service accounts are principals, you can let a service account access resources in your project by granting it a role, just like you would for any other principal. For example, if you want to let your application's service account access objects in a Cloud Storage bucket, you can grant the service account the Storage Object Viewer role (<code translate="no" dir="ltr">roles/storage.objectViewer</code>) on the bucket.</p> <p>As with all types of principals, you should only give the service account the minimum set of permissions required to achieve its goal.</p> <p>As with other principals, you can add service accounts to a group, then grant roles to the group. However, <a href="/iam/docs/best-practices-service-accounts#groups">adding service accounts to groups is not a best practice</a>. Service accounts are used by applications, and each application is likely to have its own access requirements.</p> <p>To learn how to grant roles to principals, including service accounts, see <a href="/iam/docs/granting-changing-revoking-access">Manage access to projects, folders, and organizations</a>.</p> <aside class="note"><strong>Note:</strong><span> The default Compute Engine and App Engine service accounts are granted the Editor role (<code translate="no" dir="ltr">roles/editor</code>) on the project when they are created. To improve security, we highly recommend that you disable this behavior by <a href="/resource-manager/docs/organization-policy/restricting-service-accounts#disable_service_account_default_grants">disabling automatic role grants for default service accounts</a>. For more information, see <a href="/iam/docs/service-account-types#default">Default service accounts</a>.</span></aside> <h3 id="service-accounts-resources" data-text="Service accounts as resources" tabindex="-1">Service accounts as resources</h3> <p>Service accounts are also resources that can have their own allow policies. As a result, you can let other principals access a service account by granting them a role on the service account, or on one of the service account's parent resources. For example, to let a user <a href="#impersonation">impersonate</a> a service account, you could grant the user the Service Account Token Creator role (<code translate="no" dir="ltr">roles/iam.serviceAccountTokenCreator</code>) on the service account.</p> <p>When granting a role that allows a user to impersonate a service account, keep in mind that the user can access all the resources that the service account can access. Use caution when letting users impersonate highly privileged service accounts, such as the Compute Engine and App Engine <a href="/iam/docs/service-account-types#default">default service accounts</a>.</p> <p>For more information on the roles that you can grant to principals on service accounts, see <a href="/iam/docs/service-account-permissions">Service account permissions</a>.</p> <p>To learn how to grant a principal a role on a service account, see <a href="/iam/docs/manage-access-service-accounts">Manage access to service accounts</a>.</p> <h2 id="lifecycle" data-text="Service account lifecycle" tabindex="-1">Service account lifecycle</h2> <p>As you manage your projects, you'll likely create, manage, and delete many different service accounts. This section describes key considerations for managing your service accounts at the various stages of their lifecycle.</p> <h3 id="locations" data-text="Where to create service accounts" tabindex="-1">Where to create service accounts</h3> <p>Each service account is located in a project. After you create a service account, you cannot move it to a different project.</p> <p>There are a few ways to organize your service accounts into projects:</p> <ul> <li><p><strong>Create service accounts and resources in the same project.</strong></p> <p>This approach makes it easier to get started with service accounts. However, it can be difficult to keep track of your service accounts when they are spread across many projects.</p></li> <li><p><strong>Centralize service accounts in separate projects.</strong></p> <p>This approach puts all of the service accounts for your organization in a small number of projects, which can make the service accounts easier to manage. However, it requires extra setup if you <a href="/iam/docs/attach-service-accounts">attach service accounts to resources</a> in other projects, which allows those resources to use the service account as their identity.</p> <p>When a service account is in one project, and it accesses a resource in another project, you usually must <a href="/apis/docs/getting-started#enabling_apis">enable the API</a> for that resource in both projects. For example, if you have a service account in the project <code translate="no" dir="ltr">my-service-accounts</code> and a Cloud SQL instance in the project <code translate="no" dir="ltr">my-application</code>, you must enable the Cloud SQL API in both <code translate="no" dir="ltr">my-service-accounts</code> and <code translate="no" dir="ltr">my-application</code>.</p> <p>By default, you can create up to 100 service accounts in a project. If you need to create additional service accounts, <a href="/docs/quotas/view-manage#requesting_higher_quota">request a quota increase</a>.</p></li> </ul> <p>To learn how to create a service account, see <a href="/iam/docs/service-accounts-create">Create service accounts</a>.</p> <h3 id="org-policy-service-accounts" data-text="Prevent the creation of service accounts" tabindex="-1">Prevent the creation of service accounts</h3> <p>To better control where service accounts are created, you might want to prevent service account creation in some projects in your organization.</p> <p>You can prevent the creation of service accounts by enforcing the <code translate="no" dir="ltr">constraints/iam.disableServiceAccountCreation</code> <a href="/resource-manager/docs/organization-policy/org-policy-constraints">organization policy constraint</a> in an organization, project, or folder.</p> <p>Before you enforce this constraint, consider the following limitations:</p> <ul> <li><p>If you enforce this constraint in a project, or in all projects within an organization, then some Google Cloud services cannot create <a href="/iam/docs/service-account-types#default">default service accounts</a>. As a result, if the project runs workloads that need to <a href="#credentials">authenticate as a service account</a>, the project might not contain a service account that the workload can use.</p> <p>To address this issue, you can <a href="/iam/docs/attach-service-accounts#enabling-cross-project">enable service account impersonation across projects</a>. When you enable this feature, you can create service accounts in a centralized project, then attach the service accounts to resources in other projects. Workloads running on those resources can use the attached service accounts to authenticate, making the default service accounts unnecessary.</p></li> <li><p>Some features, such as <a href="/iam/docs/workload-identity-federation">Workload Identity Federation</a>, require you to create service accounts.</p> <p>If you don't use Workload Identity Federation, consider using organization policy constraints to <a href="/iam/docs/manage-workload-identity-pools-providers#restrict">block federation from all identity providers</a>.</p></li> </ul> <h3 id="organize" data-text="Keep track of service accounts" tabindex="-1">Keep track of service accounts</h3> <p>Over time, as you create more and more service accounts, you might lose track of which service account is used for what purpose.</p> <p>The display name of a service account is a good way to capture additional information about the service account, such as the purpose of the service account or a contact person for the account. For new service accounts, you can populate the display name when creating the service account. For existing service accounts use the <a href="/iam/reference/rest/v1/projects.serviceAccounts/update"><code translate="no" dir="ltr">serviceAccounts.update()</code></a> method to modify the display name.</p> <h3 id="compute" data-text="Use service accounts with Compute Engine" tabindex="-1">Use service accounts with Compute Engine</h3> <p>Compute Engine instances need to run as service accounts to have access to other Google Cloud resources. To help secure your Compute Engine instances, consider the following:</p> <ul> <li><p>You can create instances in the same project with different service accounts. To change the service account of an instance after it's created, use the <a href="/compute/docs/reference/rest/v1/instances/setServiceAccount"><code translate="no" dir="ltr">instances.setServiceAccount</code></a> method.</p></li> <li><p>To set up authorization for attached service accounts, you need to configure <a href="/compute/docs/access/service-accounts#accesscopesiam">access scopes</a> in addition to configuring IAM roles.</p></li> <li><p>Since instances depend on their service accounts to have access to Google Cloud resources, avoid deleting service accounts when they are still used by running instances.</p></li> </ul> <p>To learn more about using service accounts with Compute Engine, see <a href="/compute/docs/access/service-accounts">Service accounts</a> in the Compute Engine documentation.</p> <h3 id="identify-unused" data-text="Identify unused service accounts" tabindex="-1">Identify unused service accounts</h3> <p>After some time, you might have service accounts in your projects that you no longer use.</p> <p>Unused service accounts create an unnecessary security risk, so we recommend <a href="/iam/docs/service-accounts-disable-enable#disabling">disabling unused service accounts</a>, then <a href="/iam/docs/service-accounts-delete-undelete#deleting">deleting the service accounts</a> when you are sure that you no longer need them. You can use the following methods to identify unused service accounts:</p> <ul> <li><strong><a href="/iam/docs/manage-service-account-insights">Service account insights</a></strong> tell you which service accounts in your project have not authenticated in the past 90 days.</li> <li><strong><a href="/iam/docs/service-account-recent-usage">Activity Analyzer</a></strong> lets you check when a service account or key was last used.</li> </ul> <p>You can also use <a href="/iam/docs/service-account-monitoring#identify-unused">service account usage metrics</a> to track service account and key usage generally.</p> <p>If you are an <a href="/security-command-center/pricing">Security Command Center Premium</a> customer, you can use <a href="/security-command-center/docs/concepts-event-threat-detection-overview">Event Threat Detection</a> to get a notification when a dormant service account triggers an action. Dormant service accounts are service accounts that have been inactive for more than 180 days. After a service account is used, it is no longer dormant.</p> <h3 id="deleting" data-text="Delete service accounts" tabindex="-1">Delete service accounts</h3> <p>Before deleting a service account, <a href="/iam/docs/service-accounts-disable-enable#disabling">disable the service account</a> to make sure it isn't necessary. Disabled service accounts can be re-enabled if they are still in use.</p> <p>After you confirm that a service account isn't necessary, you can <a href="/iam/docs/service-accounts-delete-undelete#deleting">delete the service account</a>.</p> <h3 id="deleting-recreating" data-text="Recreate deleted service accounts" tabindex="-1">Recreate deleted service accounts</h3> <p>It is possible to delete a service account and then create a new service account with the same name.</p> <p>When you delete a service account, its role bindings are not immediately deleted. Instead, the role bindings list the service account with the prefix <code translate="no" dir="ltr">deleted:</code>. For an example, see <a href="/iam/docs/policies#handle-deleted-members">Policies with deleted principals</a>.</p> <p>If you create a new service account with the same name as a recently deleted service account, the old bindings may still exist; however, they <strong>will not apply to the new service account</strong> even though both accounts have the same email address. This behavior occurs because service accounts are given a unique ID within Identity and Access Management (IAM) at creation. Internally, all role bindings are granted using these IDs, not the service account's email address. Therefore, any role bindings that existed for a deleted service account do not apply to a new service account that uses the same email address.</p> <p>Similarly, if you <a href="/iam/docs/attach-service-accounts">attach a service account to a resource</a>, then delete the service account and create a new service account with the same name, the new service account <strong>will not</strong> be attached to the resource.</p> <p>To prevent this unexpected behavior, consider using a new, unique name for every service account. Also, if you accidentally delete a service account, you can try to <a href="/iam/docs/service-accounts-delete-undelete#undeleting">undelete the service account</a> instead of creating a new service account.</p> <p>If you cannot undelete the original service account, and you need to create a new service account with the same name and the same roles, you must grant the roles to the new service account. For details, see <a href="/iam/docs/policies#handle-deleted-members">Policies with deleted principals</a>.</p> <p>If you also need the new service account to be attached to the same resources as the original service account, do one of the following:</p> <ul> <li>For Compute Engine instances, you can <a href="/compute/docs/access/create-enable-service-accounts-for-instances#changeserviceaccountandscopes">change the service account that is attached to the instance</a> to replace the original service account with the new service account.</li> <li>For all other resources, you must delete the existing resource, then create a new resource of the same type and <a href="/iam/docs/attach-service-accounts">attach the new service account</a>.</li> </ul> <h2 id="whats-next" data-text="What's next" tabindex="-1">What's next</h2> <ul> <li>Find out how to <a href="/iam/docs/service-accounts-create">create service accounts</a>.</li> <li>Get <a href="/iam/docs/best-practices-service-accounts">best practices for working with service accounts</a>.</li> <li>Review <a href="/iam/docs/best-practices-for-managing-service-account-keys">best practices for managing service account keys</a>.</li> </ul> <cloudx-free-trial-eligible-content> <slot slot="eligible"> <div> <h2 class="hide-from-toc" id="try-it-for-yourself" data-text=" Try it for yourself " tabindex="-1"> Try it for yourself </h2> <p> If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads. </p> <a href="https://console.cloud.google.com/freetrial" class="cloud-button cloud-button--primary" track-type="button" track-name="Get started for free" track-metadata-eventdetail="https://console.cloud.google.com/freetrial" track-metadata-modifier="primary" track-metadata-anchor_text="Get started for free" track-metadata-href="https://console.cloud.google.com/freetrial" referrerpolicy="no-referrer-when-downgrade" > Get started for free</a> </div> </slot> <slot slot="ineligible"> </slot> </cloudx-free-trial-eligible-content> <devsite-hats-survey class="nocontent" hats-id="mwETRvWii0eU5NUYprb0Y9z5GVbc" listnr-id="83405"></devsite-hats-survey> </div> <devsite-thumb-rating position="footer"> </devsite-thumb-rating> <devsite-feedback position="footer" project-name="IAM Documentation" product-id="717553" bucket="documentation" context="" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="footer" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" > <button> Send feedback </button> </devsite-feedback> <div class="devsite-floating-action-buttons"> </div> </article> <devsite-content-footer class="nocontent"> <p>Except as otherwise noted, the content of this page is licensed under the <a href="https://creativecommons.org/licenses/by/4.0/">Creative Commons Attribution 4.0 License</a>, and code samples are licensed under the <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache 2.0 License</a>. For details, see the <a href="https://developers.google.com/site-policies">Google Developers Site Policies</a>. Java is a registered trademark of Oracle and/or its affiliates.</p> <p>Last updated 2025-02-14 UTC.</p> </devsite-content-footer> <devsite-notification > </devsite-notification> <div class="devsite-content-data"> <template class="devsite-thumb-rating-feedback"> <devsite-feedback position="thumb-rating" project-name="IAM Documentation" product-id="717553" bucket="documentation" context="" version="t-devsite-webserver-20250211-r00-rc00.466928320959134316" data-label="Send Feedback Button" track-type="feedback" track-name="sendFeedbackLink" track-metadata-position="thumb-rating" class="nocontent" project-icon="https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/super_cloud.png" > <button> Need to tell us more? </button> </devsite-feedback> </template> <template class="devsite-content-data-template"> [[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-02-14 UTC."],[],[]] </template> </div> </devsite-content> </main> <devsite-footer-promos class="devsite-footer"> </devsite-footer-promos> <devsite-footer-linkboxes class="devsite-footer"> <nav class="devsite-footer-linkboxes nocontent" aria-label="Footer links"> <ul class="devsite-footer-linkboxes-list"> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Why Google</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/why-google-cloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-position="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/why-google-cloud/"track-metadata-child_headline="why google"track-name="choosing google cloud"track-metadata-module="footer"> Choosing Google Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/trust-center/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/security/"track-metadata-position="footer"track-name="trust and security"track-metadata-child_headline="why google"track-metadata-module="footer"> Trust and security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/modern-infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/modern-infrastructure/"track-metadata-child_headline="why google"track-metadata-position="footer"track-name="modern infrastructure cloud"track-metadata-module="footer"> Modern Infrastructure Cloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/multicloud/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="why google"track-name="multicloud"track-metadata-eventDetail="cloud.google.com/multicloud/"track-metadata-module="footer"> Multicloud </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/infrastructure/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/infrastructure/"track-name="global infrastructure"track-metadata-child_headline="why google"track-type="footer link"track-metadata-position="footer"> Global infrastructure </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/customers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"track-name="customers and case studies"track-metadata-eventDetail="cloud.google.com/customers/"track-metadata-child_headline="why google"> Customers and case studies </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/analyst-reports/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-name="analyst reports"track-metadata-eventDetail="cloud.google.com/analyst-reports/"track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="why google"track-type="footer link"> Analyst reports </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/whitepapers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-child_headline="why google"track-type="footer link"track-metadata-position="footer"track-name="whitepapers"track-metadata-eventDetail="cloud.google.com/whitepapers/"track-metadata-module="footer"> Whitepapers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/blog/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-name="blog"track-metadata-child_headline="engage"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/blog/"track-metadata-position="footer"> Blog </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Products and pricing</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/pricing/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="products and pricing"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/pricing/"track-name="google cloud pricing"> Google Cloud pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//workspace.google.com/pricing.html" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-position="footer"track-type="footer link"target="_blank"track-name="google workspace pricing"track-metadata-eventDetail="workspace.google.com/pricing.html"track-metadata-module="footer"track-metadata-child_headline="products and pricing"> Google Workspace pricing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/products/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-eventDetail="cloud.google.com/products/"track-metadata-module="footer"track-metadata-child_headline="products and pricing"track-metadata-position="footer"track-name="see all products"track-type="footer link"> See all products </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Solutions</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/solutions/infrastructure-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-eventDetail="cloud.google.com/solutions/infrastructure-modernization/"track-metadata-module="footer"track-metadata-child_headline="solutions"track-name="infrastructure modernization"track-type="footer link"track-metadata-position="footer"> Infrastructure modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/databases/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-name="databases"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/databases"track-metadata-child_headline="solutions"track-metadata-position="footer"track-type="footer link"> Databases </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/application-modernization/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/application-modernization/"track-metadata-child_headline="solutions"track-metadata-position="footer"track-name="application development"track-type="footer link"> Application modernization </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/smart-analytics/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventDetail="cloud.google.com/solutions/smart-analytics/"track-metadata-module="footer"track-metadata-position="footer"track-metadata-child_headline="solutions"track-type="footer link"track-name="smart analytics"> Smart analytics </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/ai/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/ai/"track-name="artificial intelligence"track-metadata-child_headline="solutions"> Artificial Intelligence </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/security/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/solutions/security/"track-name="security"track-metadata-child_headline="solutions"> Security </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://workspace.google.com/enterprise/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-type="footer link"track-metadata-child_headline="solutions"track-metadata-position="footer"target="_blank"track-metadata-eventDetail="workspace.google.com/enterprise/"track-metadata-module="footer"track-name="productivity and work transformation"> Productivity & work transformation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#industry-solutions" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-name="industry solutions"track-metadata-eventDetail="cloud.google.com/solutions/#industry-solutions"track-metadata-position="footer"track-metadata-module="footer"track-type="footer link"track-metadata-child_headline="solutions"> Industry solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/devops/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-position="footer"track-metadata-child_headline="solutions"track-name="devops solutions"track-type="footer link"track-metadata-eventDetail="cloud.google.com/solutions/devops/"track-metadata-module="footer"> DevOps solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/#section-14" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="solutions"track-metadata-eventDetail="cloud.google.com/solutions/#section-14"track-metadata-module="footer"track-name="small business solutions"> Small business solutions </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/solutions/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-eventDetail="cloud.google.com/solutions/"track-metadata-child_headline="solutions"track-type="footer link"track-name="see all solutions"track-metadata-position="footer"track-metadata-module="footer"> See all solutions </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Resources</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/affiliate-program/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-metadata-module="footer"track-metadata-child_headline="resources"track-type="footer link"track-name="google cloud affiliate program"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/affiliate-program/"> Google Cloud Affiliate Program </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/docs/"track-metadata-position="footer"track-name="google cloud documentation"track-metadata-child_headline="resources"track-type="footer link"> Google Cloud documentation </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/get-started/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-eventDetail="cloud.google.com/docs/get-started/"track-metadata-module="footer"track-name="google cloud quickstarts"track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="resources"> Google Cloud quickstarts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/marketplace/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-name="google cloud marketplace"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/marketplace/"track-metadata-child_headline="resources"track-metadata-position="footer"track-type="footer link"> Google Cloud Marketplace </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/discover/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-eventDetail="learn/"track-name="learn about cloud computing"track-metadata-module="footer"track-type="footer link"track-metadata-child_headline="resources"track-metadata-position="footer"> Learn about cloud computing </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/support-hub/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-eventDetail="cloud.google.com/support-hub/"track-name="support"track-metadata-child_headline="resources"track-metadata-position="footer"track-type="footer link"track-metadata-module="footer"> Support </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/docs/samples" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-type="footer link"track-metadata-position="footer"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/docs/samples"track-metadata-child_headline="resources"track-name="code samples"> Code samples </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/architecture/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-eventDetail="cloud.google.com/architecture/"track-metadata-position="footer"track-metadata-module="footer"track-name="cloud architecture center"track-type="footer link"track-metadata-child_headline="resources"> Cloud Architecture Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/training/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-child_headline="resources"track-metadata-position="footer"track-type="footer link"track-name="training"track-metadata-module="footer"track-metadata-eventDetail="cloud.google.com/training/"> Training </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/learn/certification/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-position="footer"track-type="footer link"track-metadata-child_headline="resources"track-name="certifications"track-metadata-eventDetail="cloud.google.com/certification"track-metadata-module="footer"> Certifications </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//developers.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-metadata-module="footer"track-name="google developers"track-metadata-child_headline="resources"track-type="footer link"target="_blank"track-metadata-eventDetail="developers.google.com"track-metadata-position="footer"> Google for Developers </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/startup/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-metadata-child_headline="resources"track-type="footer link"track-metadata-position="footer"track-metadata-eventDetail="cloud.google.com/startup/"track-name="google cloud for startups"track-metadata-module="footer"> Google Cloud for Startups </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//status.cloud.google.com" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-metadata-position="footer"track-metadata-module="footer"track-metadata-child_headline="resources"target="_blank"track-type="footer link"track-metadata-eventDetail="status.cloud.google.com"track-name="system status"> System status </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/release-notes" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 14)" track-name="release notes"track-type="footer link"track-metadata-eventDetail="cloud.google.com/release-notes/"track-metadata-position="footer"track-metadata-child_headline="resources"track-metadata-module="footer"> Release Notes </a> </li> </ul> </li> <li class="devsite-footer-linkbox "> <h3 class="devsite-footer-linkbox-heading no-link">Engage</h3> <ul class="devsite-footer-linkbox-list"> <li class="devsite-footer-linkbox-item"> <a href="/contact/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 1)" track-type="footer link"track-name="contact sales"track-metadata-eventDetail="cloud.google.com/contact/"track-metadata-position="footer"track-metadata-child_headline="engage"track-metadata-module="footer"> Contact sales </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//cloud.google.com/find-a-partner" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 2)" track-metadata-child_headline="engage"track-name="find a partner"track-metadata-module="footer"target="_blank"track-type="footer link"track-metadata-eventDetail="cloud.google.com/find-a-partner"track-metadata-position="footer"> Find a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/partners/become-a-partner/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 3)" track-metadata-position="footer"track-metadata-module="footer"track-name="become a partner"track-type="footer link"track-metadata-eventDetail="cloud.google.com/partners/become-a-partner/"track-metadata-child_headline="engage"> Become a Partner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/events/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 4)" track-metadata-eventDetail="cloud.withgoogle.com/events"track-metadata-child_headline="engage"track-metadata-module="footer"track-name="events"track-metadata-position="footer"track-type="footer link"> Events </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/podcasts/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 5)" track-metadata-position="footer"track-metadata-module="footer"track-type="footer link"track-metadata-eventDetail="cloud.google.com/podcasts/"target="_blank"track-name="podcasts"track-metadata-child_headline="engage"rel="noopener"> Podcasts </a> </li> <li class="devsite-footer-linkbox-item"> <a href="/developers/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 6)" track-metadata-module="footer"track-type="footer link"track-metadata-child_headline="engage"track-metadata-eventDetail="cloud.google.com/developers/"track-name="developer center"track-metadata-position="footer"> Developer Center </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudpresscorner.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 7)" track-type="footer link"rel="noopener"track-metadata-eventDetail="www.googlecloudpresscorner.com"target="_blank"track-metadata-position="footer"track-metadata-child_headline="engage"track-name="press corner"track-metadata-module="footer"> Press Corner </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 8)" track-metadata-eventDetail="www.youtube.com/googlecloud"track-metadata-child_headline="engage"target="_blank"track-metadata-module="footer"track-metadata-position="footer"track-name="google cloud on youtube"track-type="footer link"rel="noopener"> Google Cloud on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//www.youtube.com/googlecloudplatform" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 9)" track-metadata-child_headline="engage"target="_blank"rel="noopener"track-metadata-module="footer"track-metadata-position="footer"track-name="google cloud tech on youtube"track-type="footer link"track-metadata-eventDetail="www.youtube.com/googlecloudplatform"> Google Cloud Tech on YouTube </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//x.com/googlecloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 10)" track-metadata-module="footer"rel="noopener"track-name="follow on x"target="_blank"track-metadata-position="footer"track-type="footer link"track-metadata-eventDetail="x.com/googlecloud"track-metadata-child_headline="engage"> Follow on X </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 11)" track-type="footer link"track-metadata-eventDetail="userresearch.google.com/?reserved=1&utm_source=website&Q_Language=en&utm_medium=own_srch&utm_campaign=CloudWebFooter&utm_term=0&utm_content=0&productTag=clou&campaignDate=jul19&pType=devel&referral_code=jk212693"track-metadata-child_headline="engage"track-name="join user research"track-metadata-position="footer"track-metadata-module="footer"target="_blank"> Join User Research </a> </li> <li class="devsite-footer-linkbox-item"> <a href="//careers.google.com/cloud" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 12)" track-name="we are hiring join google cloud"track-type="footer link"target="_blank"track-metadata-position="footer"track-metadata-child_headline="engage"track-metadata-eventDetail="careers.google.com/cloud"track-metadata-module="footer"> We're hiring. Join Google Cloud! </a> </li> <li class="devsite-footer-linkbox-item"> <a href="https://www.googlecloudcommunity.com/" class="devsite-footer-linkbox-link gc-analytics-event" data-category="Site-Wide Custom Events" data-label="Footer Link (index 13)" track-name="google cloud community"target="_blank"track-metadata-eventDetail="www.googlecloudcommunity.com"track-metadata-child_headline="engage"rel="noopener"track-metadata-position="footer"track-metadata-module="footer"track-type="footer link"> Google Cloud Community </a> </li> </ul> </li> </ul> </nav> </devsite-footer-linkboxes> <devsite-footer-utility class="devsite-footer"> <div class="devsite-footer-utility nocontent"> <nav class="devsite-footer-utility-links" aria-label="Utility links"> <ul class="devsite-footer-utility-list"> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//about.google/" data-category="Site-Wide Custom Events" data-label="Footer About Google link" track-type="footer link" target="_blank" track-metadata-position="footer" track-metadata-eventDetail="//about.google/" track-name="about google" track-metadata-module="utility footer" > About Google </a> </li> <li class="devsite-footer-utility-item devsite-footer-privacy-link"> <a class="devsite-footer-utility-link gc-analytics-event" href="//policies.google.com/privacy" data-category="Site-Wide Custom Events" data-label="Footer Privacy link" track-metadata-position="footer" target="_blank" track-metadata-module="utility footer" track-name="privacy" track-type="footer link" track-metadata-eventDetail="//policies.google.com/privacy" > Privacy </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="//www.google.com/intl/en/policies/terms/regional.html" data-category="Site-Wide Custom Events" data-label="Footer Site terms link" track-metadata-position="footer" track-type="footer link" track-metadata-eventDetail="//www.google.com/intl/en/policies/terms/regional.html" track-metadata-module="utility footer" track-name="site terms" target="_blank" > Site terms </a> </li> <li class="devsite-footer-utility-item "> <a class="devsite-footer-utility-link gc-analytics-event" href="/product-terms/" data-category="Site-Wide Custom Events" data-label="Footer Google Cloud terms link" track-name="google cloud terms" track-type="footer link" track-metadata-eventDetail="/product-terms/" track-metadata-position="footer" track-metadata-module="utility footer" > Google Cloud terms </a> </li> <li class="devsite-footer-utility-item glue-cookie-notification-bar-control"> <a class="devsite-footer-utility-link gc-analytics-event" href="#" data-category="Site-Wide Custom Events" data-label="Footer Manage cookies link" track-metadata-module="utility footer" track-name="Manage cookies" aria-hidden="true" track-type="footer link" track-metadata-eventDetail="#" track-metadata-position="footer" > Manage cookies </a> </li> <li class="devsite-footer-utility-item devsite-footer-carbon-button"> <a class="devsite-footer-utility-link gc-analytics-event" href="/sustainability" data-category="Site-Wide Custom Events" data-label="Footer Our third decade of climate action: join us link" track-metadata-module="utility footer" track-name="Our third decade of climate action: join us" track-type="footer link" track-metadata-eventDetail="/sustainability/" track-metadata-position="footer" > Our third decade of climate action: join us </a> </li> <li class="devsite-footer-utility-item devsite-footer-utility-button"> <span class="devsite-footer-utility-description">Sign up for the Google Cloud newsletter</span> <a class="devsite-footer-utility-link gc-analytics-event" href="/newsletter/" data-category="Site-Wide Custom Events" data-label="Footer Subscribe link" track-name="subscribe" track-metadata-module="utility footer" track-metadata-position="footer" track-type="footer link" track-metadata-eventDetail="/newsletter/" > Subscribe </a> </li> </ul> <devsite-language-selector> <ul role="presentation"> <li role="presentation"> <a role="menuitem" lang="en" >English</a> </li> <li role="presentation"> <a role="menuitem" lang="de" >Deutsch</a> </li> <li role="presentation"> <a role="menuitem" lang="es_419" >Español – América Latina</a> </li> <li role="presentation"> <a role="menuitem" lang="fr" >Français</a> </li> <li role="presentation"> <a role="menuitem" lang="id" >Indonesia</a> </li> <li role="presentation"> <a role="menuitem" lang="it" >Italiano</a> </li> <li role="presentation"> <a role="menuitem" lang="pt_br" >Português – Brasil</a> </li> <li role="presentation"> <a role="menuitem" lang="zh_cn" >中文 – 简体</a> </li> <li role="presentation"> <a role="menuitem" lang="ja" >日本語</a> </li> <li role="presentation"> <a role="menuitem" lang="ko" >한국어</a> </li> </ul> </devsite-language-selector> </nav> </div> </devsite-footer-utility> <devsite-panel></devsite-panel> </section></section> <devsite-sitemask></devsite-sitemask> <devsite-snackbar></devsite-snackbar> <devsite-tooltip ></devsite-tooltip> <devsite-heading-link></devsite-heading-link> <devsite-analytics> <script type="application/json" analytics>[]</script> <script type="application/json" tag-management>{"at": "True", "ga4": [], "ga4p": [], "gtm": [{"id": "GTM-5CVQBG", "purpose": 1}], "parameters": {"internalUser": "False", "language": {"machineTranslated": "False", "requested": "en", "served": "en"}, "pageType": "article", "projectName": "IAM Documentation", "signedIn": "False", "tenant": "cloud", "recommendations": {"sourcePage": "", "sourceType": 0, "sourceRank": 0, "sourceIdenticalDescriptions": 0, "sourceTitleWords": 0, "sourceDescriptionWords": 0, "experiment": ""}, "experiment": {"ids": ""}}}</script> </devsite-analytics> <devsite-badger></devsite-badger> <cloudx-user></cloudx-user> <cloudx-free-trial-eligible-store freeTrialEligible='true'></cloudx-free-trial-eligible-store> <cloudx-pricing-socket></cloudx-pricing-socket> <cloudx-experiments type="TestAACodivertedExperiment" path="/virtual/TestAACodivertedExperiment/configureExperiment" location="SG" variant="variant2" ></cloudx-experiments> <cloudx-experiment-ids userCountry="SG" devsiteExperimentIdList="[39300012, 39300021, 39300118, 39300195, 39300251, 39300318, 39300320, 39300327, 39300345, 39300354, 39300364, 39300373, 39300412, 39300421, 39300436, 39300468, 39300473, 39300487, 39300496, 39300498, 39300569]"> </cloudx-experiment-ids> <script nonce="WY1y1rzEaTL3af0C/Xxh3r1go0ymH3"> (function(d,e,v,s,i,t,E){d['GoogleDevelopersObject']=i; t=e.createElement(v);t.async=1;t.src=s;E=e.getElementsByTagName(v)[0]; E.parentNode.insertBefore(t,E);})(window, document, 'script', 'https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/js/app_loader.js', '[2,"en",null,"/js/devsite_app_module.js","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud","https://cloud-dot-devsite-v2-prod.appspot.com",null,null,["/_pwa/cloud/manifest.json","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/images/video-placeholder.svg","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/favicons/onecloud/favicon.ico","https://www.gstatic.com/devrel-devsite/prod/v38a693baeb774512feb42f10aac8f755d8791ed41119b5be7a531f8e16f8279f/cloud/images/cloud-logo.svg","https://fonts.googleapis.com/css?family=Google+Sans:400,500,700|Google+Sans+Text:400,400italic,500,500italic,700,700italic|Roboto:400,400italic,500,500italic,700,700italic|Roboto+Mono:400,500,700&display=swap"],1,null,[1,6,8,12,14,17,21,25,50,52,63,70,75,76,80,87,91,92,93,97,98,100,101,102,103,104,105,107,108,109,110,112,113,116,117,118,120,122,124,125,126,127,129,130,131,132,133,134,135,136,138,140,141,147,148,149,151,152,156,157,158,159,161,163,164,168,169,170,179,180,182,183,186,191,193,196],"AIzaSyAP-jjEJBzmIyKR4F-3XITp8yM9T1gEEI8","AIzaSyB6xiKGDR5O3Ak2okS4rLkauxGUG7XP0hg","cloud.google.com","AIzaSyAQk0fBONSGUqCNznf6Krs82Ap1-NV6J4o","AIzaSyCCxcqdrZ_7QMeLCRY20bh_SXdAYqy70KY",null,null,null,["MiscFeatureFlags__emergency_css","Profiles__enable_stripe_subscription_management","Cloud__enable_cloud_facet_chat","Cloud__enable_legacy_calculator_redirect","EngEduTelemetry__enable_engedu_telemetry","Analytics__enable_clearcut_logging","Profiles__enable_completequiz_endpoint","Profiles__enable_dashboard_curated_recommendations","MiscFeatureFlags__enable_view_transitions","TpcFeatures__enable_mirror_tenant_redirects","Cloud__enable_cloud_shell_fte_user_flow","Profiles__enable_awarding_url","MiscFeatureFlags__enable_firebase_utm","Profiles__enable_page_saving","DevPro__enable_cloud_innovators_plus","MiscFeatureFlags__enable_explain_this_code","Profiles__enable_join_program_group_endpoint","Cloud__enable_free_trial_server_call","Search__enable_ai_eligibility_checks","DevPro__enable_developer_subscriptions","Cloud__enable_cloud_shell","TpcFeatures__enable_unmirrored_page_left_nav","BookNav__enable_tenant_cache_key","Profiles__enable_release_notes_notifications","Concierge__enable_pushui","Profiles__enable_completecodelab_endpoint","Experiments__reqs_query_experiments","Search__enable_ai_search_summaries_restricted","MiscFeatureFlags__developers_footer_image","Cloud__enable_llm_concierge_chat","Profiles__enable_developer_profiles_callout","Cloud__enable_cloudx_ping","MiscFeatureFlags__enable_variable_operator","Profiles__enable_public_developer_profiles","Cloud__enable_cloudx_experiment_ids","Search__enable_suggestions_from_borg","CloudShell__cloud_code_overflow_menu","Profiles__enable_recognition_badges","Profiles__enable_profile_collections","Search__enable_dynamic_content_confidential_banner","Profiles__enable_complete_playlist_endpoint","Search__enable_ai_search_summaries","MiscFeatureFlags__developers_footer_dark_image","MiscFeatureFlags__enable_project_variables","Search__scope_to_project_tenant","Concierge__enable_concierge_restricted","Profiles__require_profile_eligibility_for_signin","Cloud__enable_cloud_dlp_service","Search__enable_page_map","CloudShell__cloud_shell_button"],null,null,"AIzaSyBLEMok-5suZ67qRPzx0qUtbnLmyT_kCVE","https://developerscontentserving-pa.clients6.google.com","AIzaSyCM4QpTRSqP5qI4Dvjt4OAScIN8sOUlO-k","https://developerscontentsearch-pa.clients6.google.com",1,4,1,"https://developerprofiles-pa.clients6.google.com",[2,"cloud","Google Cloud","cloud.google.com",null,"cloud-dot-devsite-v2-prod.appspot.com",null,null,[1,1,null,null,null,null,null,null,null,null,null,[1],null,null,null,null,null,1,[1],[null,null,null,[1,20],"/terms/recommendations"],[1],null,[1],[1,null,1],[1,1,null,null,1,null,["/vertex-ai/"]]],null,[22,null,null,null,null,null,"/images/cloud-logo.svg","/images/favicons/onecloud/apple-icon.png",null,null,null,null,1,1,1,[6,5],[],null,null,[[],[],[],[],[],[],[],[]],null,1,null,null,null,null,[]],[],null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[6,1,14,15,22,23,29,37],null,[[null,null,null,null,null,null,[1,[["docType","Choose a content type",[["ApiReference",null,null,null,null,null,null,null,null,"API reference"],["Sample",null,null,null,null,null,null,null,null,"Code sample"],["ReferenceArchitecture",null,null,null,null,null,null,null,null,"Reference architecture"],["Tutorial",null,null,null,null,null,null,null,null,"Tutorial"]]],["category","Choose a topic",[["AiAndMachineLearning",null,null,null,null,null,null,null,null,"Artificial intelligence and machine learning (AI/ML)"],["ApplicationDevelopment",null,null,null,null,null,null,null,null,"Application development"],["BigDataAndAnalytics",null,null,null,null,null,null,null,null,"Big data and analytics"],["Compute",null,null,null,null,null,null,null,null,"Compute"],["Containers",null,null,null,null,null,null,null,null,"Containers"],["Databases",null,null,null,null,null,null,null,null,"Databases"],["HybridCloud",null,null,null,null,null,null,null,null,"Hybrid and multicloud"],["LoggingAndMonitoring",null,null,null,null,null,null,null,null,"Logging and monitoring"],["Migrations",null,null,null,null,null,null,null,null,"Migrations"],["Networking",null,null,null,null,null,null,null,null,"Networking"],["SecurityAndCompliance",null,null,null,null,null,null,null,null,"Security and compliance"],["Serverless",null,null,null,null,null,null,null,null,"Serverless"],["Storage",null,null,null,null,null,null,null,null,"Storage"]]]]]],[1],null,1],[[null,null,null,null,null,["GTM-5CVQBG"],null,null,null,null,null,[["GTM-5CVQBG",2]],1],null,null,null,null,null,1],"mwETRvWii0eU5NUYprb0Y9z5GVbc",4,null,null,null,null,null,null,null,null,null,null,null,null,null,"cloud.devsite.google"],null,"pk_live_5170syrHvgGVmSx9sBrnWtA5luvk9BwnVcvIi7HizpwauFG96WedXsuXh790rtij9AmGllqPtMLfhe2RSwD6Pn38V00uBCydV4m",1]') </script> <devsite-a11y-announce></devsite-a11y-announce> </body> </html>

CINXE.COM

Service accounts overview | IAM Documentation | Google Cloud