You are managing identity configuration in a Google Cloud project with the ID `finance-analytics-prod`. You need to create a new user-managed service account named `app-scanner` to run an internal data inspection tool. Which TWO of the following statements regarding the creation and default attributes of this service account are correct?
- The service account email address will automatically be generated in the format `[email protected]`.Answer
- You can create the service account using the CLI command `gcloud iam service-accounts create app-scanner --display-name="App Scanner"`.Answer
- CNewly created user-managed service accounts are automatically granted the primitive Owner role (`roles/owner`) on the project.
- DCreating a service account automatically generates and downloads a persistent JSON private key file to your local machine.
- ETo create a service account in a project, you must first enable the IAM API at the Organization level rather than in the target project.
Answer
The statement specifying that the service account email is formatted as `[email protected]` and the statement specifying the `gcloud iam service-accounts create` command are both correct.
User-managed service accounts in Google Cloud are assigned an email address structured as `[SA_NAME]@[PROJECT_ID].iam.gserviceaccount.com`. Furthermore, the standard gcloud command to provision a service account is `gcloud iam service-accounts create [SA_NAME]`.
Step-by-Step Solution
Key Concept
Creating User-Managed Service Accounts and Default IAM Properties