Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Note

This document has moved to cloud.google.com: Granting service account user permission. This KB article will be removed.

This page describes how to grant service account user permission to the Cloud Data Fusion. When Cloud Data Fusion provisions a Dataproc cluster, a user managed service account can be specified. That service account will be used in the virtual machines in that Dataproc cluster. If the user doesn’t specify any service account, the default Google-managed Compute Engine service account will be used. Regardless of what service account is being used in the Dataproc cluster, Cloud Data Fusion needs to have permission to use that service account.

...

  1. In the GCP Console, go to the IAM page.

    Go to the IAM page

  2. From the project selector at the top of the page, choose the project, folder, or organization on which the Cloud Data Fusion instance belongs to.

  3. Find and copy the Cloud Data Fusion service account. It is in the format of service-[project-number]@gcp-sa-datafusion.iam.gserviceaccount.com.

Info

Note: Grant the Cloud Data Fusion runner role (roles/datafusion.runner) to service accounts that are used by Dataproc.

Granting Service Account User Permission

...