Managing service accounts
A service account is an identity that an application or a Compute Engine VM uses to run authorized API calls to Google Cloud services such as Google Cloud Storage, BigQuery, and so on. Contrary to a user account, this account type is not created in the Google Admin console as a Cloud Identity, but in a Google Cloud project. It doesn’t have a password and can’t be used for interactive login to a console. Service accounts can be used by applications running in Google Cloud and on-premises. Also, users can use service accounts in certain scenarios.
There are the following types of service accounts:
- Google-managed service accounts (service agents) are created automatically so that Google Cloud services that you enable can interact with your resources. You can find the complete list of service agents at https://cloud.google.com/iam/docs/service-agents.
- User-managed default service accounts are created automatically when an API for a...
