delegates property
The sequence of service accounts in a delegation chain.
This field is required for
delegated requests.
For
direct requests,
which are more common, do not specify this field. Each service account
must be granted the roles/iam.serviceAccountTokenCreator
role on its
next service account in the chain. The last service account in the chain
must be granted the roles/iam.serviceAccountTokenCreator
role on the
service account that is specified in the name
field of the request. The
delegates must have the following format:
projects/-/serviceAccounts/{ACCOUNT_EMAIL_OR_UNIQUEID}
. The -
wildcard
character is required; replacing it with a project ID is invalid.
Implementation
core.List<core.String>? delegates;