Stay organized with collections
Save and categorize content based on your preferences.
App Engine apps require a service account in order to access other Google Cloud
services and execute tasks. By default, the
App Engine default service account
is used as the identity of your App Engine app. You may also specify a
different user-managed service
account to be used as the
identity for a specific version of your App Engine app. This allows you
to grant different privileges to each version, based on the specific tasks it
performs, and avoid granting more privileges than necessary.
This guide covers how to specify a different user-managed service account when
deploying a new version. If you don't need to create a distinct service account
when deploying a specific version of your app, you can continue to use the
default service account by not specifying a service account.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-03-05 UTC."],[[["App Engine apps use a service account to access other Google Cloud services, with the App Engine default service account being the default identity."],["You can use a user-managed service account instead of the default for a specific version of your App Engine app, allowing for tailored privileges."],["User-managed service accounts can be specified when deploying a new version of your app via the `gcloud app deploy` command or within the `appengine-web.xml` file."],["It is important not to remove the App Engine standard environment service agent in your project, as it delegates the user-managed service account as the identity for your app."],["When specifying a user-managed service account, if it's set in both the `app.yaml` file and through the `gcloud` CLI, the `gcloud` setting will be prioritized."]]],[]]
