I'm unable to create a Cloud Function in my GCP project using GUI, but have admin roles for GCF, SA and IAM.

Here is the error message:

Missing necessary permission iam.serviceAccounts.actAs for cloud-client-api-gae on the service account [email protected]. Grant the role 'roles/iam.serviceAccountUser' to cloud-client-api-gae on the service account [email protected].

cloud-client-api-gae is not an SA nor User on my IAM list. It must be a creature living underneath Graphical User Interfrace.

I have Enabled API for GCF, AppEngine and I have Service Account Admin role.

I had literally 0 search results when googling for cloud-client-api-gae.

CodePudding user response：

I contacted GCP support and it seems I was missing a single permission for my user: Service Account User - that's it.

PS: Person from support didn't know what this thing called "cloud-client-api-gae" is.

CodePudding user response：

Saw the same thing. You need Service account user on the SA you plan to deploy the CF onto. The same incorrect identity was shown.