google-cloud-iam Questions

1

Solved

I have an application which allows OpenID Connect login. I need to be able to give the users admin/read-only access based on their roles or group membership. With Keycloak, I can configure the Clie...

3

Solved

I want to achieve the same effect of the gcloud projects list via an api call (python) specifically. However, the only thing I can come across by browsing docs is this. Is this operation tied spe...
Kris asked 13/10, 2019 at 18:8

3

I run following terraform. I made a mistake of using google_storage_bucket_iam_policy instead of google_storage_bucket_iam_binding so instead of adding new policy, it replaced all of existing polic...
Satanic asked 16/9, 2020 at 0:40

3

Solved

We are planning to use Big Query and Cloud Storage but have questions regarding access via VPN/VPC. As Big Query, GCS are managed services is it correct to assume that it is not possible to restri...

1

Solved

According to the documentation: an example of creating an identity pool would be gcloud iam workload-identity-pools create my-workload-identity-pool --location="global" --display-name=&q...
Musquash asked 15/3, 2022 at 11:13

2

Solved

I would like to connect to a Cloud SQL instance from Cloud Run, using a service account. The connection used to be created within the VPC and we would just provide a connection string with a user a...

3

Solved

Problem: I have a project in BigQuery where all my data is stored. Within this project I created multiple datasets containing different views. Now I want to use different service accounts to query ...

4

I'm trying to use the Google Cloud Translation API in my application but whenever I try to translate something it comes up with this missing valid API error. I've done the quickstart steps and that...

4

Solved

I try to set up controller service account for Dataflow. In my dataflow options I have: options.setGcpCredential(GoogleCredentials.fromStream( new FileInputStream("key.json")).createScop...

3

I'm looking into roles in GCP. I have a use case to read everything in GCP. So when I looked at the viewer role, docs say it is a read-only role but it seems it has a lot of restrictions. what are ...
Blague asked 15/7, 2021 at 0:14

2

Solved

I have multiple environments in Google Compute Engine (dev, staging, and production), each with its own Google Cloud SQL instance. The instances connect via Cloud SQL Proxy and authenticate with a ...

1

I have the following script I'd like to execute to create my service account and give it a Cloud Build Service Account role. # create service account for github actions gcloud iam service-accounts...
Damning asked 23/8, 2021 at 12:41

3

We have a user that is allowed to SSH into an VM on the Google Cloud Platform. His key is added to the VM and he can SSH using gcloud compute ssh name-of-vm However connecting in this way will ...
Sussna asked 10/4, 2018 at 13:3

3

Solved

Known issue: Installing google-cloud-sdk (linux package or from tarball) has a quirk where you cannot create projects from the command line before accepting the terms of service. Steps to repro...

1

Solved

I am using terraform to build infra in GCP. I am trying to assign roles to a service account using terraform but unable to do so. Below is my code: sa.tf: resource "google_service_account&quot...

2

Solved

I have set up a new Firestore environment, and when attempting to upload and then read data from storage via cloud functions, I get the following error: [email protected] does not have storage...

3

Solved

After reading similar questions, such as: i am using gcp service account but when calling dialogue flow api its giving error : and Why is Google Cloud API trying to connect as an end-user? and ...

1

Solved

I have 2 ServiceAccounts in my Google Cloud Platform (GCP) Project owner executor The owner ServiceAccount has 1 project-wide role attached to it: "Owner" - for the project The execut...

1

I am facing challenge to invoke cloud Function from cloud task using oidcToken. Here are details of my IAM & Code: const { CloudTasksClient } = require('@google-cloud/tasks'); const client = ne...

1

Solved

I have added the role "Cloud Tasks Enqueuer" to my [email protected] service account (see first screenshot). However, when I try and check if the account has permission to call &quot...

1

Solved

I've shared a Google Sheet with my Google Service account email, which looks something like: [email protected] This permits my application to access that Google Sheet. I'd like to be able to s...
Siegbahn asked 1/8, 2020 at 18:28

2

Solved

I'm trying to deploy a Firebase hosted project with a Service Account (that I created myself, not one provided by Google/Firebase as default) via a pipeline (Gitlab, but that shouldn't matter for t...
Katabasis asked 6/7, 2020 at 10:34

1

I'm attempting to get a Node project setup on Google Cloud Run with Cloud Storage. I am running into an authentication issue when using a created Service Account. When creating the service account...

2

Solved

I would like to allow users to impersonate a service account to do operations on a long running process. However, all the code examples illustrate a service account impersonating another service a...

2

Solved

I checked the IAM & admin in the GCP console UI. I have two roles: (Company name) Project Owner and Editor. The member is my company email address. But when I try to edit(the edit button) ot...
Metalliferous asked 16/1, 2020 at 12:54

© 2022 - 2025 — McMap. All rights reserved.