Google Cloud Platform (GCP)：如何为服务帐户赋予额外的角色？
Google Cloud Platform (GCP): How to give additional roles to service account?
如何为默认的 Google App Engine (GAE) 服务帐户赋予额外的角色：
具体来说，我想将“Cloud SQL 客户端”角色赋予默认应用引擎服务帐户。当我尝试修改角色时，我收到此消息：
正如 @John Hanley 在评论部分中回答的那样，要向服务帐户添加角色，请转到 IAM & Admin -> IAM ，在 table 中找到您的服务帐户并对其进行编辑以授予必要的角色。
此外，请查看文档 Understanding service accounts section Granting access to service accounts:
Granting access to a service account to access a resource is similar
to granting access to any other identity. For example, if you have an
application running on Compute Engine and you want the application to
only have access to create objects in Cloud Storage. You can create a service account for the application and grant it the Storage Object
Creator role.
Learn about Granting roles to all types of members, including
service accounts.
如何为默认的 Google App Engine (GAE) 服务帐户赋予额外的角色：
具体来说，我想将“Cloud SQL 客户端”角色赋予默认应用引擎服务帐户。当我尝试修改角色时，我收到此消息：
正如 @John Hanley 在评论部分中回答的那样，要向服务帐户添加角色，请转到 IAM & Admin -> IAM ，在 table 中找到您的服务帐户并对其进行编辑以授予必要的角色。
此外，请查看文档 Understanding service accounts section Granting access to service accounts:
Granting access to a service account to access a resource is similar to granting access to any other identity. For example, if you have an application running on Compute Engine and you want the application to only have access to create objects in Cloud Storage. You can create a service account for the application and grant it the Storage Object Creator role.
Learn about Granting roles to all types of members, including service accounts.