Hi all Crawling through the pulumi documentation on creating

Question

Hi all Crawling through the pulumi documentation on creating service accounts but would anyone know how to add additional roles to a service account on GCP

prehistoric-activity-61023 · Answer

I can copy n paste you a snippet from my project gimme me a sec

prehistoric-activity-61023 · Answer

``` create service account svc account = gcp serviceaccount Account f sa svc account spec account id account id=svc account spec account id display name=svc account spec display name project=project project id opts=pulumi ResourceOptions parent=project assign project roles for role in svc account spec project roles gcp projects IAMMember f sa svc account spec account id simple role name role member=pulumi Output concat serviceAccount svc account email project=project project id role=role opts=pulumi ResourceOptions parent=svc account ```

prehistoric-activity-61023 · Answer

hope that will help you slightly smiling face

fast-arm-63150 · Answer

hey cheers will take a look

prehistoric-activity-61023 · Answer

just in case `role` in `gcp projects IAMMember` is a string with `roles ` prefix e g `roles storage admin`

prehistoric-activity-61023 · Answer

`simple role name` is just my util function ```def simple role name role str gt str Create a simplified role name that can be used as a part of resource name Example roles logging logWriter becomes logging logwriter return role replace roles replace lower ```

fast-arm-63150 · Answer

ah cool what is svc account spec

prehistoric-activity-61023 · Answer

instance of ServiceAccount class my Pydantic model ```class ServiceAccount BaseModel account id str display name Optional str project roles List str = create key bool = False```

prehistoric-activity-61023 · Answer

as I said it s just a copy n paste from one of my projects so it contains additional references to such things slightly smiling face