> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/gcp-entities/service-account.md).

# Service Account

The **GCPServiceAccount** entity represents a Google Cloud service account used by applications and workloads to authenticate and interact with GCP APIs.

| Field            | Type    | Possible Operators                                             | Description                                          |
| ---------------- | ------- | -------------------------------------------------------------- | ---------------------------------------------------- |
| Guid             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier for the entity in Forestall        |
| FSName           | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used in Forestall                       |
| GCPTier          | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | GCP tier classification assigned by Forestall        |
| Description      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Description of the service account                   |
| Disabled         | BOOLEAN | N/A (toggle)                                                   | Whether the service account is disabled              |
| DisplayName      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Human-readable display name of the service account   |
| Email            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Email address identifying the service account        |
| Name             | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Full resource name of the service account            |
| Oauth2ClientId   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | OAuth2 client ID associated with the service account |
| ProjectId        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | GCP project the service account belongs to           |
| ServiceAccountId | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique ID of the service account                     |
| UniqueId         | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Google-assigned unique identifier                    |
| risk             | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Risk score assigned to the entity                    |
| ExposurePoint    | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Exposure point score assigned to the entity          |
| IsShadow         | BOOLEAN | N/A (toggle)                                                   | Whether the entity is marked as a Shadow Admin       |