有没有办法在 Google Cloud Platform 中对服务帐户进行分组？

Question

Within the same Google Cloud Platform organization I'm managing there are several service accounts belonging to different projects that need access to a single (separate) project.

Is there any way to avoid having to individually grant access to each one of the service accounts to resources in the project via role?

With regular user accounts (ie those logging in via @gmail.com or other domain credentials) this can be achieved by putting all of them in a group through Cloud Identity and binding the role, but I do not know if there is a way of doing this for service accounts.

Answer 1

您可以使用Google 群组（Google 帐户和服务帐户的集合）将访问策略应用于一组用户，以便您能够一次授予和更改整个群组的访问控制，而不是授予或更改访问控制单个用户或服务帐户一次一个。