Re: User not authorized to act as service account 'XXXXXXX-compute@developer.gserviceaccount.com'. The user must be granted iam.serviceAccounts.actAs permission, included in Owner, Editor, Service Account User role. See https://cloud.google.com/iam/

[Matias Coca]

Hi BENFARHAT,

The error is a permissions one, saying that your user should have one of these roles set in IAM policies: Owner, Editor, Service Account User role.

You need to go to the IAM UI in the project where you're trying to create the environment and check the roles that your user has, surely you don't have any of these previous ones. Ask the person in your organization that has the privileges to set IAM policies to give your user one of these roles.

I hope you can solve this problem

Regards

Matias

On Tue, Aug 30, 2022 at 6:23 AM 'BENFARHAT MohamedYoussef' via cloud-composer-discuss <cloud-compo...@googlegroups.com> wrote:

Hello, 

I can't create an environment, I don't know why. I'm using the Compute Engine default service account. 

User not authorized to act as service account 'XXXXXXX...@developer.gserviceaccount.com'. The user must be granted iam.serviceAccounts.actAs permission, included in Owner, Editor, Service Account User role. See https://cloud.google.com/iam/

and I'm having this error too: 

 Service Error: Failed to load subnetworks. Please leave the field empty to apply default values or retry later. 

--
You received this message because you are subscribed to the Google Groups "cloud-composer-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cloud-composer-di...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/cloud-composer-discuss/96dda3d7-1465-41ea-90fe-41356618e9ccn%40googlegroups.com.