IssueTracker

A customer would try to run a custom training job in Vertex AI using a custom service account. This custom service account is created and managed in a separate project. Sample command:

gcloud ai custom-jobs create --display-name=<redacted> \
    --region us-central1 \
    --project <redacted> \
    --service-account=<sa-name>@<redacted>.iam.gserviceaccount.com \ # SA from a different project
    --worker-pool-spec=replica-count=1,machine-type='n1-standard-8',executor-image-uri='us-docker.pkg.dev/vertex-ai/training/tf-cpu.2-6:latest',python-module='trainer.task' \
    --python-package-uris gs://<redacted>/<redacted>.tar.gz

From docs, using service accounts from other projects is not supported. Enterprise workloads such as those run by this customer could benefit from this feature.