無論您使用的是使用者自行管理的服務帳戶，還是叢集中虛擬機器的預設 Compute Engine 服務帳戶，都必須將服務帳戶使用者角色授予 Cloud Data Fusion。否則，Cloud Data Fusion 無法佈建 Dataproc 叢集，執行資料管道時會顯示以下錯誤：
PROVISION task failed in REQUESTING_CREATE state for program run [pipeline-name] due to Dataproc operation failure: INVALID_ARGUMENT: User not authorized to act as service account '[service-account-name]'
取得服務帳戶名稱
前往 Google Cloud 控制台的「Identity and Access Management」頁面。 前往「身分與存取權管理」頁面
從頁面頂端的專案選取器中，選擇 Cloud Data Fusion 執行個體所屬的專案、資料夾或機構。
找出並複製 Cloud Data Fusion 服務帳戶名稱。請使用下列格式：service-[project-number]@gcp-sa-datafusion.iam.gserviceaccount.com。
[[["容易理解","easyToUnderstand","thumb-up"],["確實解決了我的問題","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["難以理解","hardToUnderstand","thumb-down"],["資訊或程式碼範例有誤","incorrectInformationOrSampleCode","thumb-down"],["缺少我需要的資訊/範例","missingTheInformationSamplesINeed","thumb-down"],["翻譯問題","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["上次更新時間：2025-06-16 (世界標準時間)。"],[[["To allow Cloud Data Fusion to provision and run pipelines on Dataproc clusters, the Cloud Data Fusion Service Agent must be granted the Service Account User role on the Dataproc Service Account."],["For Dataproc service accounts, it's also necessary to grant `datafusion.instances.runtime` permission to enable access to Cloud Data Fusion runtime resources."],["If the Service Account User role is not granted, Cloud Data Fusion will be unable to provision a Dataproc cluster, resulting in an error during pipeline execution."],["The Cloud Data Fusion runner role and Cloud Storage admin role must be granted to service accounts used by Dataproc to authorize the execution of Cloud Data Fusion pipelines and access Cloud Storage resources."],["You can grant these permissions in the UI when you create an instance starting in Cloud Data Fusion versions 6.2.3, alternatively you can follow the manual steps provided to grant these roles."]]],[]]
