Create

Creates a ServiceAccount and returns it

12 variables
9 variables

Creates a ServiceAccount and returns it

Authorization

To use this building block you will have to grant access to at least one of the following scopes:

  • View and manage your data across Google Cloud Platform services

Input

This building block consumes 12 input parameters

  = Parameter name
  = Format

name STRING Required

Required. The resource name of the project associated with the service accounts, such as projects/my-project-123

accountId STRING

Required. The account id that is used to generate the service account email address and a stable unique id. It is unique within a project, must be 6-30 characters long, and match the regular expression [a-z]([-a-z0-9]*[a-z0-9]) to comply with RFC1035

serviceAccount OBJECT

A service account in the Identity and Access Management API.

To create a service account, specify the project_id and the account_id for the account. The account_id is unique within the project, and is used to generate the service account email address and a stable unique_id.

If the account already exists, the account's resource name is returned in the format of projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}. The caller can use the name in other methods to access the account.

All other methods can identify the service account using the format projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}. Using - as a wildcard for the PROJECT_ID will infer the project from the account. The ACCOUNT value can be the email address or the unique_id of the service account

serviceAccount.oauth2ClientId STRING

@OutputOnly The OAuth2 client id for the service account. This is used in conjunction with the OAuth2 clientconfig API to make three legged OAuth2 (3LO) flows to access the data of Google users

serviceAccount.uniqueId STRING

@OutputOnly The unique and stable id of the service account

serviceAccount.displayName STRING

Optional. A user-specified name for the service account. Must be less than or equal to 100 UTF-8 bytes

serviceAccount.description STRING

Optional. A user-specified opaque description of the service account. Must be less than or equal to 256 UTF-8 bytes

serviceAccount.etag BINARY

Optional. Note: etag is an inoperable legacy field that is only returned for backwards compatibility

serviceAccount.disabled BOOLEAN

@OutputOnly A bool indicate if the service account is disabled. The field is currently in alpha phase

serviceAccount.name STRING

The resource name of the service account in the following format: projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}.

Requests using - as a wildcard for the PROJECT_ID will infer the project from the account and the ACCOUNT value can be the email address or the unique_id of the service account.

In responses the resource name will always be in the format projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}

serviceAccount.email STRING

@OutputOnly The email address of the service account

serviceAccount.projectId STRING

@OutputOnly The id of the project that owns the service account

Output

This building block provides 9 output parameters

  = Parameter name
  = Format

oauth2ClientId STRING

@OutputOnly The OAuth2 client id for the service account. This is used in conjunction with the OAuth2 clientconfig API to make three legged OAuth2 (3LO) flows to access the data of Google users

uniqueId STRING

@OutputOnly The unique and stable id of the service account

displayName STRING

Optional. A user-specified name for the service account. Must be less than or equal to 100 UTF-8 bytes

description STRING

Optional. A user-specified opaque description of the service account. Must be less than or equal to 256 UTF-8 bytes

etag BINARY

Optional. Note: etag is an inoperable legacy field that is only returned for backwards compatibility

disabled BOOLEAN

@OutputOnly A bool indicate if the service account is disabled. The field is currently in alpha phase

name STRING

The resource name of the service account in the following format: projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}.

Requests using - as a wildcard for the PROJECT_ID will infer the project from the account and the ACCOUNT value can be the email address or the unique_id of the service account.

In responses the resource name will always be in the format projects/{PROJECT_ID}/serviceAccounts/{ACCOUNT}

email STRING

@OutputOnly The email address of the service account

projectId STRING

@OutputOnly The id of the project that owns the service account