by shigemk2



Some Google Cloud services have Google-managed service accounts that allow the services to access your resources. These service accounts are known as service agents. If an API requires a service agent, then Google creates the service agent after you activate and use the API. You might see evidence of these service agents in several different places, including a project's allow policy and audit log entries for various services.