Note |
---|
This document has moved to cloud.google.com: Granting service account user permission. This KB article will be removed. |
This page describes how to grant service account user permission to the Cloud Data Fusion. When Cloud Data Fusion provisions a Dataproc cluster, a user managed service account can be specified. That service account will be used in the virtual machines in that Dataproc cluster. If the user doesn’t specify any service account, the default Google-managed Compute Engine service account will be used. Regardless of what service account is being used in the Dataproc cluster, Cloud Data Fusion needs to have permission to use that service account.
...
In the GCP Console, go to the IAM page.
From the project selector at the top of the page, choose the project, folder, or organization on which the Cloud Data Fusion instance belongs to.
Find and copy the Cloud Data Fusion service account. It is in the format of
service-[project-number]@gcp-sa-datafusion.iam.gserviceaccount.com
.
Info |
---|
Note: Grant the Cloud Data Fusion runner role ( |
Granting Service Account User Permission
...