Workload Identity Pools

Open Unified Identities › Resources, filter Providers to GCP Identities › Workload Identity Pool, then select a row to open its details. Workload Identity Pools let organizations grant workload (non-human, e.g., external service or CI/CD) identities access to Google Cloud resources without exporting service account keys.

Workload Identity Pools

Workload Identity Pools Details

Opening a workload identity pool shows the Information, Principals and Providers tabs. The card title can carry a Tier 0/Tier 2 badge.

You can analyze the object in the Graph by clicking the Graph » button next to the Information title.

GCP Workload Identity Pool Details

The Information tab contains attributes about the Workload Identity Pool. The page also includes tabs for Principals and Providers, which list the identities and providers associated with the pool.

Information

Attribute	Description
Display Name	The human-readable name of the pool (e.g., TestPool).
Description	A free-text description of the pool's purpose (e.g., Test Workload Identity Pool).
State	The lifecycle state of the pool (e.g., ACTIVE).
Name	The full resource path of the pool (e.g., projects/627426666292/locations/global/workloadIdentityPools/testpool).
Disabled	Indicates whether the pool is currently disabled.
Project	A link to the parent project the pool belongs to.
Location	The location of the pool (e.g., global).

Principals

Lists the principals (identities/subjects) federated through this workload identity pool, with Name and Principal Type columns.

Providers

Lists the identity providers (e.g., OIDC, AWS) configured for this workload identity pool, with Display Name, Name and Description columns.