Service agents

Some Google Cloud services have Google-managed service accounts that allow the services to access your resources. These service accounts are known as service agents. If an API requires a service agent, then Google creates the service agent after you activate and use the API. You might see evidence of these service agents in several different places, including a project's allow policy and audit log entries for various services.

This page provides details about the service agents for all services that are publicly available, including the following:

• The domain name used in the service agent's email address.

• The role that the service agent is granted on the project.

  When the service agent is created, Google grants this role automatically.

Warning: Do not grant service agent roles to any principals except service agents. Some service agent roles contain very powerful permissions, and the permissions within these roles can change without notice. Instead, choose a different predefined role, or create a custom role with the permissions you need.

Google can introduce new service agents at any time, both for existing services and for new services. Both the creation time and the email address format for service agents are subject to change.

Service agent	Role
AI Platform Custom Code Service Agent Service agent for aiplatform.googleapis.com. [e-mail]	Vertex AI Custom Code Service Agent (roles/aiplatform.customCodeServiceAgent) Granted on the project.
AI Platform Service Agent Service agent for aiplatform.googleapis.com. [e-mail]	Vertex AI Service Agent (roles/aiplatform.serviceAgent) Granted on the project.
ASM Mesh Control Plane Service Account Service agent for meshconfig.googleapis.com. [e-mail]	Mesh Managed Control Plane Service Agent (roles/meshcontrolplane.serviceAgent) Granted on the project.
ASM Mesh Data Plane Service Account Service agent for meshconfig.googleapis.com. [e-mail]	Mesh Data Plane Service Agent (roles/meshdataplane.serviceAgent) Granted on the project.
Access Approval Service Agent Service agent for accessapproval.googleapis.com. For the project: [e-mail] For the folder: [e-mail] For the organization: [e-mail]	None
Ads Data Hub Service Account Service agent for adsdatahub.googleapis.com. [e-mail]	None
AlloyDB Service Account Service agent for alloydb.googleapis.com. [e-mail]	AlloyDB Service Agent (roles/alloydb.serviceAgent) Granted on the project.
Anthos Audit Service Account Service agent for anthosaudit.googleapis.com. [e-mail]	Anthos Audit Service Agent (roles/anthosaudit.serviceAgent) Granted on the project.
Anthos Config Management Service Account Service agent for anthosconfigmanagement.googleapis.com. [e-mail]	Anthos Config Management Service Agent (roles/anthosconfigmanagement.serviceAgent) Granted on the project.
Anthos Identity Service Account Service agent for anthosidentityservice.googleapis.com. [e-mail]	Anthos Identity Service Agent (roles/anthosidentityservice.serviceAgent) Granted on the project.
Anthos Multi-Cloud Service Agent Service agent for gkemulticloud.googleapis.com. [e-mail]	Anthos Multi-Cloud Service Agent (roles/gkemulticloud.serviceAgent) Granted on the project.
Anthos Service Account Service agent for anthos.googleapis.com. [e-mail]	Anthos Service Agent (roles/anthos.serviceAgent) Granted on the project.
Anthos Service Mesh Service Account Service agent for meshconfig.googleapis.com. [e-mail]	Anthos Service Mesh Service Agent (roles/anthosservicemesh.serviceAgent) Granted on the project.
Anthos Support Service Account Service agent for connectgateway.googleapis.com. [e-mail]	Anthos Support Service Agent (roles/anthossupport.serviceAgent) Granted on the project.
Apigee Registry Service Account Service agent for apigeeregistry.googleapis.com. [e-mail]	None
Apigee Service Agent Service agent for apigee.googleapis.com. [e-mail]	Apigee Service Agent (roles/apigee.serviceAgent) Granted on the project.
App Development Experience Service Account Service agent for appdevelopmentexperience.googleapis.com. [e-mail]	App Development Experience Service Agent (roles/appdevelopmentexperience.serviceAgent) Granted on the project.
App Engine Flexible Environment Service Agent Service agent for appengineflex.googleapis.com. [e-mail]	App Engine flexible environment Service Agent (roles/appengineflex.serviceAgent) Granted on the project.
App Engine Standard Environment Service Agent Service agent for appenginestandard.googleapis.com. [e-mail]	App Engine Standard Environment Service Agent (roles/appengine.serviceAgent) Granted on the project.
Application Integration Service Agent Service agent for integrations.googleapis.com. [e-mail]	Application Integration Service Agent (roles/integrations.serviceAgent) Granted on the project.
Artifact Registry Service Agent Service agent for artifactregistry.googleapis.com. [e-mail]	Artifact Registry Service Agent (roles/artifactregistry.serviceAgent) Granted on the project.
AssuredWorkloads Service Account Service agent for assuredworkloads.googleapis.com. [e-mail]	Assured Workloads Service Agent (roles/assuredworkloads.serviceAgent) Granted on the project.
AutoML Recommendations Service Account Service agent for recommendationengine.googleapis.com. [e-mail]	Recommendations AI Service Agent (roles/automlrecommendations.serviceAgent) Granted on the project.
AutoML Service Agent Service agent for automl.googleapis.com. [e-mail]	AutoML Service Agent (roles/automl.serviceAgent) Granted on the project.
Backup and DR Runner Service Agent Service agent for backupdr.googleapis.com. [e-mail]	None
Backup and DR Service Agent Service agent for backupdr.googleapis.com. [e-mail]	Backup and DR Service Agent (roles/backupdr.serviceAgent) Granted on the project.
Backup for GKE Service Account Service agent for gkebackup.googleapis.com. [e-mail]	Backup for GKE Service Agent (roles/gkebackup.serviceAgent) Granted on the project.
Bare Metal Solution Service Account Service agent for baremetalsolution.googleapis.com. [e-mail]	Bare Metal Solution Service Agent (roles/baremetalsolution.serviceAgent) Granted on the project.
Batch Service Account Service agent for batch.googleapis.com. [e-mail]	Google Batch Service Agent (roles/batch.serviceAgent) Granted on the project.
Big Query Service Agent Service agent for bigquery.googleapis.com. [e-mail]	None
BigQuery Connection Delegation Service Agent Service agent for bigqueryconnection.googleapis.com. [e-mail] [e-mail]	None
BigQuery Connection Service Agent Service agent for bigqueryconnection.googleapis.com. [e-mail]	BigQuery Connection Service Agent (roles/bigqueryconnection.serviceAgent) Granted on the project.
BigQuery Data Transfer Service Agent Service agent for bigquerydatatransfer.googleapis.com. [e-mail]	BigQuery Data Transfer Service Agent (roles/bigquerydatatransfer.serviceAgent) Granted on the project.
BigQuery Omni Service Agent Service agent for bigquery.googleapis.com. [e-mail]	BigQuery Omni Service Agent (roles/bigqueryomni.serviceAgent) Granted on the project.
BigQuery Resource Identity Service Account Service agent for bigquery.googleapis.com. [e-mail]	None
BigQuery Spark Connection Delegate Service Agent Service agent for bigqueryconnection.googleapis.com. [e-mail]	None
BigQuery Spark Service Agent Service agent for bigquery.googleapis.com. [e-mail]	None
Binary Authorization Service Agent Service agent for binaryauthorization.googleapis.com. [e-mail]	Binary Authorization Service Agent (roles/binaryauthorization.serviceAgent) Granted on the project.
Bundles Service Agent Service agent for integrations.googleapis.com. [e-mail]	None
Chronicle Service Account Service agent for chronicle.googleapis.com. [e-mail]	Chronicle Service Agent (roles/chronicle.serviceAgent) Granted on the project.
Cloud AI Platform Notebooks Service Account Service agent for notebooks.googleapis.com. [e-mail]	AI Platform Notebooks Service Agent (roles/notebooks.serviceAgent) Granted on the project.
Cloud API Gateway Management Plane Service Account Service agent for apigateway.googleapis.com. [e-mail]	Cloud API Gateway Management Service Agent (roles/apigateway_management.serviceAgent) Granted on the project.
Cloud API Gateway Service Account Service agent for apigateway.googleapis.com. [e-mail]	Cloud API Gateway Service Agent (roles/apigateway.serviceAgent) Granted on the project.
Cloud Asset Service Agent Service agent for cloudasset.googleapis.com. [e-mail]	Cloud Asset Service Agent (roles/cloudasset.serviceAgent) Granted on the project.
Cloud Bigtable Service Agent Service agent for bigtableadmin.googleapis.com. [e-mail]	None
Cloud Build Logging Service Agent Service agent for cloudbuild.googleapis.com. [e-mail]	Cloud Build Logging Service Agent (roles/cloudbuild.loggingServiceAgent) Granted on the project.
Cloud Build Service Agent Service agent for cloudbuild.googleapis.com. [e-mail]	Cloud Build Service Account (roles/cloudbuild.builds.builder) Granted on the project.
Cloud Build Service Agent Service agent for cloudbuild.googleapis.com. [e-mail]	Cloud Build Service Agent (roles/cloudbuild.serviceAgent) Granted on the project.
Cloud Certificate Manager Service Account Service agent for certificatemanager.googleapis.com. [e-mail]	Certificate Manager Service Agent (roles/certificatemanager.serviceAgent) Granted on the project.
Cloud Composer Service Agent Service agent for composer.googleapis.com. [e-mail]	Cloud Composer API Service Agent (roles/composer.serviceAgent) Granted on the project.
Cloud Config Manager Service Account Service agent for config.googleapis.com. [e-mail]	Cloud Config Service Agent (roles/cloudconfig.serviceAgent) Granted on the project.
Cloud Data Fusion Service Account Service agent for datafusion.googleapis.com. [e-mail]	Cloud Data Fusion API Service Agent (roles/datafusion.serviceAgent) Granted on the project.
Cloud Data Loss Prevention Service Agent Service agent for dlp.googleapis.com. [e-mail]	DLP API Service Agent (roles/dlp.serviceAgent) Granted on the project.
Cloud Database Migration Service Account Service agent for datamigration.googleapis.com. [e-mail]	Database Migration Service Agent (roles/datamigration.serviceAgent) Granted on the project.
Cloud Dataflow Service Account Service agent for dataflow.googleapis.com. [e-mail]	Cloud Dataflow Service Agent (roles/dataflow.serviceAgent) Granted on the project.
Cloud Dataplex Service Account Service agent for dataplex.googleapis.com. [e-mail]	Cloud Dataplex Service Agent (roles/dataplex.serviceAgent) Granted on the project.
Cloud Datastream Service Account Service agent for datastream.googleapis.com. [e-mail]	Datastream Service Agent (roles/datastream.serviceAgent) Granted on the project.
Cloud Deploy Service Account Service agent for clouddeploy.googleapis.com. [e-mail]	Cloud Deploy Service Agent (roles/clouddeploy.serviceAgent) Granted on the project.
Cloud Endpoints Service Agent Service agent for endpoints.googleapis.com. [e-mail]	Cloud Endpoints Service Agent (roles/endpoints.serviceAgent) Granted on the project.
Cloud File Storage Service Account Service agent for file.googleapis.com. [e-mail]	Cloud Filestore Service Agent (roles/file.serviceAgent) Granted on the project.
Cloud Firestore Service Agent Service agent for firestore.googleapis.com. [e-mail]	Firestore Service Agent (roles/firestore.serviceAgent) Granted on the project.
Cloud Healthcare Service Agent Service agent for healthcare.googleapis.com. [e-mail]	Healthcare Service Agent (roles/healthcare.serviceAgent) Granted on the project.
Cloud IDS Service Account Service agent for ids.googleapis.com. [e-mail]	None
Cloud Identity Platform Service Agent Service agent for identitytoolkit.googleapis.com. [e-mail]	Identity Platform Service Agent (roles/identitytoolkit.serviceAgent) Granted on the project.
Cloud KMS Service Agent Service agent for cloudkms.googleapis.com. [e-mail]	Cloud KMS Service Agent (roles/cloudkms.serviceAgent) Granted on the project.
Cloud Life Sciences Service Agent Service agent for lifesciences.googleapis.com. [e-mail]	Cloud Life Sciences Service Agent (roles/lifesciences.serviceAgent) Granted on the project.
Cloud Logging Service Account Service agent for logging.googleapis.com. [e-mail]	Cloud Logging Service Agent (roles/logging.serviceAgent) Granted on the project.
Cloud Logging Service Agent Service agent for logging.googleapis.com. For the folder: [e-mail] For the organization: [e-mail]	None
Cloud Managed Identities Service Agent Service agent for managedidentities.googleapis.com. [e-mail]	Cloud Managed Identities Service Agent (roles/managedidentities.serviceAgent) Granted on the project.
Cloud Memorystore Memcache Service Agent Service agent for memcache.googleapis.com. [e-mail]	Cloud Memorystore Memcached Service Agent (roles/memcache.serviceAgent) Granted on the project.
Cloud Memorystore Redis Service Agent Service agent for redis.googleapis.com. [e-mail]	Cloud Memorystore Redis Service Agent (roles/redis.serviceAgent) Granted on the project.
Cloud Migration Center Service Account Service agent for migrationcenter.googleapis.com. [e-mail]	Migration Center Service Agent (roles/migrationcenter.serviceAgent) Granted on the project.
Cloud Network Management Service Account Service agent for networkmanagement.googleapis.com. [e-mail]	GCP Network Management Service Agent (roles/networkmanagement.serviceAgent) Granted on the project.
Cloud Optimization Service Agent Service agent for cloudoptimization.googleapis.com. [e-mail]	Cloud Optimization Service Agent (roles/cloudoptimization.serviceAgent) Granted on the project.
Cloud Pub/Sub Service Account Service agent for pubsub.googleapis.com. [e-mail]	Cloud Pub/Sub Service Agent (roles/pubsub.serviceAgent) Granted on the project.
Cloud Risk Manager Service Agent Service agent for dlp.googleapis.com. [e-mail]	None
Cloud SQL Service Account Service agent for sqladmin.googleapis.com. [e-mail]	Cloud SQL Service Agent (roles/cloudsql.serviceAgent) Granted on the project.
Cloud SQL Service Agent Service agent for sqladmin.googleapis.com. For the project: [e-mail] For the folder: [e-mail] For the organization: [e-mail]	None
Cloud Scheduler Service Account Service agent for cloudscheduler.googleapis.com. [e-mail]	Cloud Scheduler Service Agent (roles/cloudscheduler.serviceAgent) Granted on the project.
Cloud Security Command Center Notification Service Account Service agent for securitycenter.googleapis.com. [e-mail]	Security Center Notification Service Agent (roles/securitycenter.notificationServiceAgent) Granted on the project.
Cloud Security Command Center Service Agent Service agent for securitycenter.googleapis.com. [e-mail]	None
Cloud Source Repositories Service Agent Service agent for sourcerepo.googleapis.com. [e-mail]	Cloud Source Repositories Service Agent (roles/sourcerepo.serviceAgent) Granted on the project.
Cloud Spanner Production Service Account Service agent for spanner.googleapis.com. [e-mail]	Cloud Spanner API Service Agent (roles/spanner.serviceAgent) Granted on the project.
Cloud Storage for Firebase Service Agent Service agent for firebasestorage.googleapis.com. [e-mail]	Cloud Storage for Firebase Service Agent (roles/firebasestorage.serviceAgent) Granted on the project.
Cloud Tasks Service Account Service agent for cloudtasks.googleapis.com. [e-mail]	Cloud Tasks Service Agent (roles/cloudtasks.serviceAgent) Granted on the project.
Cloud Trace Service Account Service agent for cloudtrace.googleapis.com. [e-mail]	None
Cloud Translation Service Agent Service agent for translate.googleapis.com. [e-mail]	Cloud Translation API Service Agent (roles/cloudtranslate.serviceAgent) Granted on the project.
Cloud VM Migration Service Account Service agent for vmmigration.googleapis.com. [e-mail]	VM Migration Service Agent (roles/vmmigration.serviceAgent) Granted on the project.
Cloud Web Security Scanner Service Agent Service agent for websecurityscanner.googleapis.com. [e-mail]	Cloud Web Security Scanner Service Agent (roles/websecurityscanner.serviceAgent) Granted on the project.
Cloud Workflows Service Agent Service agent for workflows.googleapis.com. [e-mail]	Cloud Workflows Service Agent (roles/workflows.serviceAgent) Granted on the project.
Compute Engine Service Agent Service agent for compute.googleapis.com. [e-mail]	Compute Engine Service Agent (roles/compute.serviceAgent) Granted on the project.
Compute Usage Export Service Agent Service agent for compute.googleapis.com. [e-mail]	None
Connectors Service Account Service agent for connectors.googleapis.com. [e-mail]	Connectors Platform Service Agent (roles/connectors.serviceAgent) Granted on the project.
Contact Center AI Insights Service Account Service agent for contactcenterinsights.googleapis.com. [e-mail]	Contact Center AI Insights Service Agent (roles/contactcenterinsights.serviceAgent) Granted on the project.
Contact Center AI Insights Service Account for CMEK (prod) Service agent for contactcenterinsights.googleapis.com. [e-mail]	None
Contact Center AI Platform Service Account Service agent for contactcenteraiplatform.googleapis.com. [e-mail]	None
Container Analysis Service Agent Service agent for containeranalysis.googleapis.com. [e-mail]	Container Analysis Service Agent (roles/containeranalysis.ServiceAgent) Granted on the project.
Container Scanning Service Agent Service agent for containerscanning.googleapis.com. [e-mail]	Container Scanner Service Agent (roles/containerscanning.ServiceAgent) Granted on the project.
Container Threat Detection Service Agent Service agent for containerthreatdetection.googleapis.com. [e-mail]	Container Threat Detection Service Agent (roles/containerthreatdetection.serviceAgent) Granted on the project.
Content Warehouse Service Account Service agent for contentwarehouse.googleapis.com. [e-mail]	Content Warehouse Service Agent (roles/contentwarehouse.serviceAgent) Granted on the project.
Data Connectors Service Account Service agent for dataconnectors.googleapis.com. [e-mail]	Data Connectors Service Agent (roles/dataconnectors.serviceAgent) Granted on the project.
Data Labeling Service Account Service agent for datalabeling.googleapis.com. [e-mail]	Data Labeling Service Agent (roles/datalabeling.serviceAgent) Granted on the project.
Data Pipelines Service Agent Service agent for datapipelines.googleapis.com. [e-mail]	Datapipelines Service Agent (roles/datapipelines.serviceAgent) Granted on the project.
Data Studio Service Account Service agent for datastudio.googleapis.com. [e-mail]	Data Studio Service Agent (roles/datastudio.serviceAgent) Granted on the project.
Dataform Service Account Service agent for dataform.googleapis.com. [e-mail]	Dataform Service Agent (roles/dataform.serviceAgent) Granted on the project.
Dataproc Metastore Service Account Service agent for metastore.googleapis.com. [e-mail]	Dataproc Metastore Service Agent (roles/metastore.serviceAgent) Granted on the project.
Deprecated Monitoring Service Account Service agent for monitoring.googleapis.com. [e-mail]	None
Dialogflow Service Account for CMEK (prod) Service agent for dialogflow.googleapis.com. [e-mail]	None
Dialogflow Service Agent Service agent for dialogflow.googleapis.com. [e-mail]	Dialogflow Service Agent (roles/dialogflow.serviceAgent) Granted on the project.
Discovery Engine Service Account Service agent for discoveryengine.googleapis.com. [e-mail]	Discovery Engine Service Agent (roles/discoveryengine.serviceAgent) Granted on the project.
DocumentAI Core Service Agent Service agent for documentai.googleapis.com. [e-mail]	DocumentAI Core Service Agent (roles/documentaicore.serviceAgent) Granted on the project.
Edge Container Cluster Service Agent Service agent for edgecontainer.googleapis.com. [e-mail]	None
Edge Container Service Agent Service agent for edgecontainer.googleapis.com. [e-mail]	Edge Container Service Agent (roles/edgecontainer.serviceAgent) Granted on the project.
Endpoints Consumer Portal Service Agent Service agent for endpointsportal.googleapis.com. [e-mail]	Endpoints Portal Service Agent (roles/endpointsportal.serviceAgent) Granted on the project.
Enterprise Knowledge Graph Service Agent Service agent for enterpriseknowledgegraph.googleapis.com. [e-mail]	Enterprise Knowledge Graph Service Agent (roles/enterpriseknowledgegraph.serviceAgent) Granted on the project.
Eventarc Service Agent Service agent for eventarc.googleapis.com. [e-mail]	Eventarc Service Agent (roles/eventarc.serviceAgent) Granted on the project.
External Key Management Service Service Account Service agent for cloudkms.googleapis.com. [e-mail]	None
Firebase App Check Service Account Service agent for firebaseappcheck.googleapis.com. [e-mail]	Firebase App Check Service Agent (roles/firebaseappcheck.serviceAgent) Granted on the project.
Firebase Extensions Service Agent Service agent for firebaseextensions.googleapis.com. [e-mail]	Firebase Extensions API Service Agent (roles/firebasemods.serviceAgent) Granted on the project.
Firebase Management Service Agent Service agent for firebase.googleapis.com. [e-mail]	Firebase Service Management Service Agent (roles/firebase.managementServiceAgent) Granted on the project.
Firebase Realtime Database Service Agent Service agent for firebasedatabase.googleapis.com. [e-mail]	Firebase Realtime Database Service Agent (roles/firebasedatabase.serviceAgent) Granted on the project.
Firebase Rules Service Agent Service agent for firebaserules.googleapis.com. [e-mail]	Firebase Rules System (roles/firebaserules.system) Granted on the project.
Firewall Insights Service Account Service agent for firewallinsights.googleapis.com. [e-mail]	Cloud Firewall Insights Service Agent (roles/firewallinsights.serviceAgent) Granted on the project.
G Suite Add-ons Service Account Service agent for gsuiteaddons.googleapis.com. [e-mail]	None
GCP Workload Certificate Service Account Service agent for workloadcertificate.googleapis.com. [e-mail]	Workload Certificate Service Agent (roles/workloadcertificate.serviceAgent) Granted on the project.
GKE Dataplane V2 Service Account Service agent for gkedataplanev2.googleapis.com. [e-mail]	None
GKE Hub API Service Account Service agent for gkehub.googleapis.com. [e-mail]	GKE Hub Service Agent (roles/gkehub.serviceAgent) Granted on the project.
Game Services Agent Service agent for gameservices.googleapis.com. [e-mail]	Game Services Service Agent (roles/gameservices.serviceAgent) Granted on the project.
Gke On-Prem Service Account Service agent for gkeonprem.googleapis.com. [e-mail]	GKE On-Prem Service Agent (roles/gkeonprem.serviceAgent) Granted on the project.
Google Cloud Dataproc Service Agent Service agent for dataproc.googleapis.com. [e-mail]	Dataproc Service Agent (roles/dataproc.serviceAgent) Granted on the project.
Google Cloud Functions Service Agent Service agent for cloudfunctions.googleapis.com. [e-mail]	Cloud Functions Service Agent (roles/cloudfunctions.serviceAgent) Granted on the project.
Google Cloud ML Engine Service Agent Service agent for ml.googleapis.com. [e-mail]	AI Platform Service Agent (roles/ml.serviceAgent) Granted on the project.
Google Cloud OS Config Service Agent Service agent for osconfig.googleapis.com. [e-mail]	Cloud OS Config Service Agent (roles/osconfig.serviceAgent) Granted on the project.
Google Cloud Run Service Agent Service agent for run.googleapis.com. [e-mail]	Cloud Run Service Agent (roles/run.serviceAgent) Granted on the project.
Google Container Registry Service Agent Service agent for containerregistry.googleapis.com. [e-mail]	Container Registry Service Agent (roles/containerregistry.ServiceAgent) Granted on the project.
Google Genomics Service Agent Service agent for genomics.googleapis.com. [e-mail]	Genomics Service Agent (roles/genomics.serviceAgent) Granted on the project.
Google Storage Service Agent Service agent for storage.googleapis.com. [e-mail]	None
IAP Service Account Service agent for iap.googleapis.com. [e-mail]	None
Integrated Vulnerability Scanner Service Account Service agent for securitycenter.googleapis.com. [e-mail]	None
Issuer Switch Service Account Service agent for issuerswitch.googleapis.com. [e-mail]	None
KRM API Hosting Service Account Service agent for krmapihosting.googleapis.com. [e-mail]	KRM API Hosting Service Agent (roles/krmapihosting.serviceAgent) Granted on the project.
KRM API Hosting Service Account Service agent for krmapihosting.googleapis.com. [e-mail]	KRM API Hosting AnthosApiEndpoint Service Agent (roles/krmapihosting.anthosApiEndpointServiceAgent) Granted on the project.
Kubernetes Engine Node Service Agent Service agent for container.googleapis.com. [e-mail]	Kubernetes Engine Node Service Agent (roles/container.nodeServiceAgent) Granted on the project.
Kubernetes Engine Service Agent Service agent for container.googleapis.com. [e-mail]	Kubernetes Engine Service Agent (roles/container.serviceAgent) Granted on the project.
Livestream Service Account Service agent for livestream.googleapis.com. [e-mail]	Live Stream Service Agent (roles/livestream.serviceAgent) Granted on the project.
Logging Service Agent Service agent for logging.googleapis.com. For the project: [e-mail] For the folder: [e-mail] For the organization: [e-mail]	None
Looker Service Account Service agent for looker.googleapis.com. [e-mail]	None
Mesh Config Service Account Service agent for meshconfig.googleapis.com. [e-mail]	Mesh Config Service Agent (roles/meshconfig.serviceAgent) Granted on the project.
Monitoring Service Account Service agent for monitoring.googleapis.com. [e-mail]	Monitoring Service Agent (roles/monitoring.notificationServiceAgent) Granted on the project.
Multi Cluster Ingress Service Account Service agent for multiclusteringress.googleapis.com. [e-mail]	Multi Cluster Ingress Service Agent (roles/multiclusteringress.serviceAgent) Granted on the project.
Multi cluster metering Service Account Service agent for multiclustermetering.googleapis.com. [e-mail]	Multi-cluster metering Service Agent (roles/multiclustermetering.serviceAgent) Granted on the project.
Multi-cluster Service Discovery Service Account Service agent for multiclusterservicediscovery.googleapis.com. [e-mail]	Multi-Cluster Service Discovery Service Agent (roles/multiclusterservicediscovery.serviceAgent) Granted on the project.
Network Actions Service Account Service agent for networkservices.googleapis.com. [e-mail]	Network Actions Service Agent (roles/networkactions.serviceAgent) Granted on the project.
Network Connectivity Service Account Service agent for networkconnectivity.googleapis.com. [e-mail]	Network Connectivity Service Agent (roles/networkconnectivity.serviceAgent) Granted on the project.
Network Security Service Account Service agent for networksecurity.googleapis.com. [e-mail]	None
On-Demand Scanning Service Account Service agent for ondemandscanning.googleapis.com. [e-mail]	On-Demand Scanning Service Agent (roles/ondemandscanning.serviceAgent) Granted on the project.
Playbook Runner Service Agent Service agent for integrations.googleapis.com. For the project: [e-mail] For the folder: [e-mail] For the organization: [e-mail]	None
Private CA Service Account Service agent for privateca.googleapis.com. [e-mail]	None
Pub/Sub Lite Service Account Service agent for pubsublite.googleapis.com. [e-mail]	Pub/Sub Lite Service Agent (roles/pubsublite.serviceAgent) Granted on the project.
Rapid Migration Assessment Service Account Service agent for rapidmigrationassessment.googleapis.com. [e-mail]	RMA Service Agent (roles/rapidmigrationassessment.serviceAgent) Granted on the project.
Remote Build Execution Service Agent Service agent for remotebuildexecution.googleapis.com. [e-mail]	None
Remote Build Execution Service Agent Service agent for remotebuildexecution.googleapis.com. [e-mail]	Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent) Granted on the project.
Remote Build Execution Service Agent Service agent for remotebuildexecution.googleapis.com. [e-mail]	Remote Build Execution Service Agent (roles/remotebuildexecution.serviceAgent) Granted on the project.
Retail Service Account Service agent for retail.googleapis.com. [e-mail]	Retail Service Agent (roles/retail.serviceAgent) Granted on the project.
Secret Manager Service Account Service agent for secretmanager.googleapis.com. [e-mail]	None
Secured Landing Zone Service Account Service agent for securedlandingzone.googleapis.com. [e-mail]	Secured Landing Zone Service Agent (roles/securedlandingzone.serviceAgent) Granted on the project.
Serverless Integrations Service Account Service agent for runapps.googleapis.com. [e-mail]	Serverless Integrations Service Agent (roles/runapps.serviceAgent) Granted on the project.
Serverless VPC Access Service Agent Service agent for vpcaccess.googleapis.com. [e-mail]	Serverless VPC Access Service Agent (roles/vpcaccess.serviceAgent) Granted on the project.
Service Consumer Management Service Agent Service agent for serviceconsumermanagement.googleapis.com. [e-mail]	None
Service Directory Service Account Service agent for servicedirectory.googleapis.com. [e-mail]	Service Directory Service Agent (roles/servicedirectory.serviceAgent) Granted on the project.
Service Networking Service Agent Service agent for servicenetworking.googleapis.com. [e-mail]	Service Networking Service Agent (roles/servicenetworking.serviceAgent) Granted on the project.
Spectrum SAS Service Account Service agent for sasportal.googleapis.com. [e-mail]	None
Speech-to-Text Service Account Service agent for speech.googleapis.com. [e-mail]	Cloud Speech-to-Text Service Agent (roles/speech.serviceAgent) Granted on the project.
Storage Insights Service Account Service agent for storageinsights.googleapis.com. [e-mail]	StorageInsights Service Agent (roles/storageinsights.serviceAgent) Granted on the project.
Storage Transfer Service Service Agent Service agent for storagetransfer.googleapis.com. [e-mail]	None
Stream Service Account Service agent for stream.googleapis.com. [e-mail]	Stream Service Agent (roles/stream.serviceAgent) Granted on the project.
TPU Service Agent Service agent for tpu.googleapis.com. [e-mail]	Cloud TPU API Service Agent (roles/tpu.serviceAgent) Granted on the project.
TPU Service Agent (v2) Service agent for tpu.googleapis.com. [e-mail]	Cloud TPU V2 API Service Agent (roles/cloudtpu.serviceAgent) Granted on the project.
Transcoder Service Account Service agent for transcoder.googleapis.com. [e-mail]	Transcoder Service Agent (roles/transcoder.serviceAgent) Granted on the project.
Transfer Appliance Service Account Service agent for transferappliance.googleapis.com. [e-mail]	None
VMwareEngine Service Account Service agent for vmwareengine.googleapis.com. [e-mail]	VMware Engine Service Agent (roles/vmwareengine.serviceAgent) Granted on the project.
Virtual Machine Threat Detection Service Account Service agent for securitycenter.googleapis.com. [e-mail]	None
Vision AI Service Account Service agent for visionai.googleapis.com. [e-mail]	Cloud Vision AI Service Agent (roles/visionai.serviceAgent) Granted on the project.
Workload Manager Service Account Service agent for workloadmanager.googleapis.com. [e-mail]	Workload Manager Service Agent (roles/workloadmanager.serviceAgent) Granted on the project.
Workstations Service Account Service agent for workstations.googleapis.com. [e-mail]	Workstations Service Agent (roles/workstations.serviceAgent) Granted on the project.
Workstations VM Default Service Account Service agent for workstations.googleapis.com. [e-mail]	None