The sequence of service accounts in a delegation chain. Each
service account must be granted the
roles/iam.serviceAccountTokenCreator role on its next
service account in the chain. The last service account in the
chain must be granted the
roles/iam.serviceAccountTokenCreator role on the service
account that is specified in the name field of the
request. The delegates must have the following format:
projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}.
The - wildcard character is required; replacing it with a
project ID is invalid.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-12-19 UTC.