GCP Service Account

What this article covers:

•  Requirements 
•  Permissions 
•  Default Resources 

A Google account or Google Service account with sufficient IAM permissions to authorize access to your Google Cloud organisation or project.

Scope: Your personal account is used only for authorization - we impersonate your service account with limited permissions.

• Personal Account scope: Service Account Token Creator — creates short-lived credentials (OAuth tokens, OIDC tokens, JWTs)

• Service Account scope:

  • Browser
  • Cloud Asset Viewer
  • Security Reviewer

What data we collect: Copla collects Assets and Access Control information.

• Cloud Asset Inventory