[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC):2025-04-03。"],[[["This document explains how to use a service account to connect to Compute Engine virtual machine (VM) instances using SSH, which helps automate workloads."],["Connecting to VMs as a service account can be done by directly impersonating the service account using the `gcloud` CLI with the `--impersonate-service-account` flag, requiring specific permissions such as the Service Account Token Creator role."],["You can also impersonate a service account from within a VM, requiring the Service Account User role and the `compute.projects.setCommonInstanceMetadata` permission, if OS login is not used."],["Before connecting to VMs, you must authenticate and may need to set up a default region and zone."],["Specific service accounts require different permissions depending on the context, these including but not limited to the OS Login IAM roles, Service Account Token Creator role and Service Account User role."]]],[]]