gcp-iam-catalog Roles Permissions
🔐

roles/iam.serviceAccountTokenCreator

Title Service Account Token Creator
Stage GA
Role Type Predefined
Permissions 9
Description Impersonate service accounts (create OAuth2 access tokens, sign blobs or JWTs, etc).
🔍
iam.serviceAccounts.get
iam.serviceAccounts.getAccessToken
iam.serviceAccounts.getOpenIdToken
iam.serviceAccounts.implicitDelegation
iam.serviceAccounts.list
iam.serviceAccounts.signBlob
iam.serviceAccounts.signJwt
resourcemanager.projects.get
resourcemanager.projects.list
🔍