This page describes how to find the email address of a project's Cloud Storage service agent, which is a specialized service account created and managed by Cloud Storage. For an overview of Cloud Storage service agents, including when they're created and how they're used, see Service Accounts for Cloud Storage. For a general overview of service accounts in Google Cloud, see Service Accounts.
Before you begin
In order to get the required permissions for finding the email address of a
project's service agent, ask your administrator to grant you the View Service
Accounts (roles/iam.serviceAccountViewer
) role on the project.
This predefined role contains the resourcemanager.projects.get
permission,
which is required to access the service agent of a project. You can also get
this permission with other predefined roles. To see which roles are
associated with which permissions, refer to IAM roles for
Cloud Storage.
For instructions on using roles to control access to projects, see Manage access.
Get the email address of a project's Cloud Storage service agent
- In the Google Cloud console, go to the Cloud Storage Settings page.
In the Project Access tab, the email address appears in the Cloud Storage Service Account section.
Use the gcloud storage service-agent
command:
gcloud storage service-agent --project=PROJECT_IDENTIFIER
where PROJECT_IDENTIFIER
is the ID or number of
the relevant project. For example, my-project
.
For more information, see the Cloud Storage C++ API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
For more information, see the Cloud Storage C# API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
For more information, see the Cloud Storage Go API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
For more information, see the Cloud Storage Java API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
For more information, see the Cloud Storage Node.js API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
For more information, see the Cloud Storage PHP API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
For more information, see the Cloud Storage Python API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
For more information, see the Cloud Storage Ruby API reference documentation.
To authenticate to Cloud Storage, set up Application Default Credentials. For more information, see Set up authentication for client libraries.
Have gcloud CLI installed and initialized, which lets you generate an access token for the
Authorization
header.Use
cURL
to call the JSON API with aGET
serviceAccount request:curl -X GET -H "Authorization: Bearer $(gcloud auth print-access-token)" \ "https://storage.googleapis.com/storage/v1/projects/
PROJECT_ID /serviceAccount"Where
PROJECT_ID
is the ID or number of the relevant project. For example,my-project
.
What's next
- Learn about service accounts and service agents in Cloud Storage.
- Assign a Cloud Key Management Service encryption key to a service agent.