Granular ServiceAccount permissions [35902689]

Assigned

Feature Request

Status Update

No update yet.

Description

ev...@gmail.com

created issue #1

Jan 28, 2016 09:24AM

As a system administrator I would like to be able to limit ServiceAccounts to a single operation only (for example - BigQuery write). Similar to what is being done with GCE created Service Accounts.

Potential use case - google-fluentd deployment to third party boxes with write only logging permissions.

Comments

fa...@google.com <fa...@google.com> #2Feb 3, 2016 07:09PM

Assigned to fa...@google.com.

Duplicate of

https://issuetracker.google.com/issues/72407295

fa...@google.com <fa...@google.com> #3Feb 5, 2016 03:14PM

Hi, this error only affects Cloud SDK version 186. It was previously reported in

Issue 72407295

and a fix for it should be released in Cloud SDK version 187.

In the mean time, you can downgrade to Cloud SDK version 185 as a workaround by running the following command:

gcloud components update --version 185.0.0

js...@google.com <js...@google.com> #4Aug 5, 2016 02:50PM

Update: granular roles per Cloud product are part of Identity and Access Management (

https://cloud.google.com/iam/). Because your motivating example of a BigQuery write ACL is not yet generally available I will leave this issue open.

fa...@google.com <fa...@google.com> Apr 24, 2017 06:17PM

Reassigned to gc...@google.com.

Issue 35902689

Description

Issue summary

Comments

fa...@google.com <fa...@google.com> #2Feb 3, 2016 07:09PM

fa...@google.com <fa...@google.com> #3Feb 5, 2016 03:14PM

js...@google.com <js...@google.com> #4Aug 5, 2016 02:50PM

fa...@google.com <fa...@google.com> Apr 24, 2017 06:17PM

Add comment

Issue metadata