google cloud platform - Manually created ServiceAccount in GCP belong to Project? Resources?

Question

We have a service account which is not auto created. we created it. Now how do we check the scope of this serviceaccount?

question from:https://stackoverflow.com/questions/65902712/manually-created-serviceaccount-in-gcp-belong-to-project-resources

Answer 1

The service account is an account, like a user account. The difference is the service account belong to a project (you have the project ID in the @....). The user account is a Google account, managed by Google or by your administration.

Then, except where the account is attached, there is no other difference: you can grant roles and permissions on it. As a user account. When you have created it, if you grant no role, the service account has no permission, even on its host project.