Google memiliki akun ini, tetapi akun ini khusus untuk project Anda. Akun layanan ini hanya akan dihapus jika Anda menghapus project Anda. Anda mungkin mengalami gangguan layanan jika Anda mengubah izin yang diberikan ke akun layanan ini.
Cloud Workstations Service Agent
Agen Layanan Cloud Workstations menggunakan format email berikut:
Agen layanan ini memungkinkan Cloud Workstations
melakukan tugas layanan di project Anda. Secara default, agen layanan ini otomatis diberi peran IAM Agen Layanan Workstations (roles/workstations.serviceAgent) di project Anda.
Mencabut atau mengubah izin untuk agen layanan ini akan mencegah Cloud Workstations mengakses resource komputasi dan jaringan yang mendukung workstation Anda. Untuk menghindari gangguan layanan, jangan ubah izin agen layanan.
Akun Layanan Default VM Cloud Workstations
Workstation dihosting di instance Compute Engine. Saat membuat
workstation, Anda dapat menentukan akun layanan yang akan dilampirkan ke instance
Compute Engine yang mendasarinya. Jika Anda tidak menentukan akun layanan, Akun Layanan Default VM Cloud Workstations untuk project Anda akan digunakan.
Akun Layanan Default VM Cloud Workstations menggunakan format email berikut:
Anda tidak dapat menggunakan ssh untuk terhubung ke VM yang ditetapkan ke workstation yang menggunakan konfigurasi ini.
Untuk menghindari batasan ini, Anda dapat menentukan akun layanan pada konfigurasi
workstation. Untuk mengetahui informasi selengkapnya, lihat
Menyesuaikan lingkungan.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-08-11 UTC."],[],[],null,["# Cloud Workstations service accounts\n\nThis page describes the service accounts created and managed by\nCloud Workstations. Cloud Workstations creates two service\naccounts:\n\n- [Cloud Workstations Service Agent](#workstations-service-agent)\n- [Cloud Workstations VM Default Service Account](#default_service_account)\n\nGoogle owns these accounts, but they are specific to your project. They are\ndeleted only when you delete your project. You might encounter service\ndisruptions if you change the permissions granted to these service accounts.\n\n### Cloud Workstations Service Agent\n\nThe Cloud Workstations Service Agent uses the following email format: \n\n```\nservice-PROJECT_NUMBER@gcp-sa-workstations.iam.gserviceaccount.com\n```\n\nThis service agent allows Cloud Workstations to\nperform service duties on your project. By default, this service agent is\nautomatically granted the Workstations Service Agent (`roles/workstations.serviceAgent`)\nIAM role on your project.\n\nRevoking or changing the permissions for this service agent prevents\nCloud Workstations from accessing the compute and network resources\nthat back your workstations. To avoid service disruptions, don't modify the\nservice agent's permissions.\n\n### Cloud Workstations VM Default Service Account\n\nWorkstations are hosted on Compute Engine instances. When you create a\nworkstation, you can specify a service account to attach to the underlying\nCompute Engine instance. If you don't specify a service account, the\nCloud Workstations VM Default Service Account for your project is used.\n\nThe Cloud Workstations VM Default Service Account uses the following email format: \n\n```\nservice-PROJECT_NUMBER@gcp-sa-workstationsvm.iam.gserviceaccount.com\n```\n\nUsing the Cloud Workstations VM Default Service Account has the\nfollowing limitations:\n\n- [Cloud Workstations container output logging](/workstations/docs/container-output-logging) is not supported.\n- [Impersonating a service account](/workstations/docs/authentication#impersonate-a-service-account) is not supported.\n- You cannot use `ssh` to connect to the VM assigned to the workstations that use this configuration.\n\nTo avoid these limitations, you can specify a service account on your\nworkstation configuration. For more information, see\n[Customize the environment](/workstations/docs/create-configuration#customize_environment).\n\nWhat's next\n-----------\n\n- [Authenticate and setup API access within a workstation](/workstations/docs/authentication).\n- [Access control with IAM](/workstations/docs/access-control)."]]
