You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -255,14 +258,17 @@ The code to create the operator:
255
258
Troubleshooting
256
259
"""""""""""""""
257
260
258
-
In case you want to run deploy operator using a service account and get "forbidden 403"
259
-
errors, it means that your service account has not enough permissions set via IAM.
261
+
If you want to run or deploy an operator using a service account and get “forbidden 403”
262
+
errors, it means that your service account does not have the correct
263
+
Cloud IAM permissions.
264
+
265
+
1. Assign your Service Account the Cloud Functions Developer role.
266
+
2. Grant the user the Cloud IAM Service Account User role on the Cloud Functions runtime
267
+
service account.
260
268
261
-
* First you need to Assign your Service Account "Cloud Functions Developer" role
262
-
* Make sure you grant the user the IAM Service Account User role on the Cloud Functions
263
-
Runtime service account. Typical way of doing it with gcloud is shown below - just
264
-
replace PROJECT_ID with ID of your project and SERVICE_ACCOUNT_EMAIL with the email id
265
-
of your service account.
269
+
The typical way of assigning Cloud IAM permissions with `gcloud` is
270
+
shown below. Just replace PROJECT_ID with ID of your Google Cloud Platform project
271
+
and SERVICE_ACCOUNT_EMAIL with the email ID of your service account.
266
272
267
273
.. code-block:: bash
268
274
@@ -274,6 +280,6 @@ of your service account.
274
280
275
281
See `Adding the IAM service agent user role to the runtime service <https://cloud.google.com/functions/docs/reference/iam/roles#adding_the_iam_service_agent_user_role_to_the_runtime_service_account>`_ for details
276
282
277
-
Also make sure that your service account has access to the source code of function
278
-
in case it should be downloaded. It might mean that you add Source Repository Viewer
279
-
role to the service account in case the source code is in Google Source Repository.
283
+
If the source code for your function is in Google Source Repository, make sure that
284
+
your service account has the Source Repository Viewer role so that the source code
0 commit comments