I am trying to attach a IAM role to a GCP service account cr

Question

I am trying to attach a IAM role to a GCP service account created via `pulumi` for example if i want to make the service account `storage Admin` using `serviceaccount NewIAMMember` roles are given as below roles storage admin projects lt projectName gt roles storage admin Both threw error `400` ```does not exist in the resource s hierarchy badRequest ```

bored-car-38257 · Answer

when i try using `NewIAMBinding` below is the error ```Error setting IAM policy for service account projects lt project name gt serviceAccounts lt sa email gt googleapi Error 400 Role roles storage admin is not supported for this resource badRequest```

witty-candle-66007 · Answer

A 400 error like that indicates Google is sending back the error And it looks like google does not allow assigning storage admin role to that service account One thing you could try is doing the same assignment through the GCP portal and see what if any error messages you get from the portal

bored-car-38257 · Answer

Thank you < witty candle 66007>