roles/iam.serviceAccountTokenCreator 📋 Copy

Title: Service Account Token Creator

Description: Impersonate service accounts (create OAuth2 access tokens, sign blobs or JWTs, etc).

Stage: GA

9 Assigned Permissions:

• iam.serviceAccounts.get
• iam.serviceAccounts.getAccessToken
• iam.serviceAccounts.getOpenIdToken
• iam.serviceAccounts.implicitDelegation
• iam.serviceAccounts.list
• iam.serviceAccounts.signBlob
• iam.serviceAccounts.signJwt
• resourcemanager.projects.get
• resourcemanager.projects.list