User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.
User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.
The bytes of the approvedIdentities at the given index.
getApprovedIdentitiesCount()
publicintgetApprovedIdentitiesCount()
User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.
User-created service accounts ending in the provided identities are
allowed to have Admin, Owner or Editor roles granted to them. Otherwise
a finding will be created.
A valid identity can be:
a partilly specified service account that starts with "@", e.g.
"@myproject.iam.gserviceaccount.com". This approves all the service
accounts suffixed with the specified identity.
a fully specified service account that does not start with "@", e.g.
"myadmin@myproject.iam.gserviceaccount.com".
Google-created service accounts are all approved.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Missing the information I need","missingTheInformationINeed","thumb-down"],["Too complicated / too many steps","tooComplicatedTooManySteps","thumb-down"],["Out of date","outOfDate","thumb-down"],["Samples / code issue","samplesCodeIssue","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-16 UTC."],[],[]]