> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/gcp-identities/workload-identity-pools.md).

# Workload Identity Pools

Open **Unified Identities › Resources**, filter **Providers** to **GCP Identities › Workload Identity Pool**, then select a row to open its details. Workload Identity Pools let organizations grant workload (non-human, e.g., external service or CI/CD) identities access to Google Cloud resources without exporting service account keys.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-08a2a40d9cbda2ea59eba8989b8cdb8318acdfa5%2FGCPWorkloadIdentityPoolsListPage.png?alt=media" alt=""><figcaption><p>Workload Identity Pools</p></figcaption></figure>

### Workload Identity Pools Details

Opening a workload identity pool shows the **`Information`**, **`Principals`** and **`Providers`** tabs. The card title can carry a `Tier 0`/`Tier 2` badge.

{% hint style="info" %}
You can analyze the object in the [Graph](/forestall/visualize/visualize.md) by clicking the **Graph »** button next to the `Information` title.
{% endhint %}

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-179e1a0602eab709b32dac825f24618330f710e5%2FGCPWorkloadIdentityPoolsDetailPage.png?alt=media" alt=""><figcaption><p>GCP Workload Identity Pool Details</p></figcaption></figure>

The Information tab contains attributes about the Workload Identity Pool. The page also includes tabs for **Principals** and **Providers**, which list the identities and providers associated with the pool.

### Information

| Attribute    | Description                                                                                                         |
| ------------ | ------------------------------------------------------------------------------------------------------------------- |
| Display Name | The human-readable name of the pool (e.g., `TestPool`).                                                             |
| Description  | A free-text description of the pool's purpose (e.g., `Test Workload Identity Pool`).                                |
| State        | The lifecycle state of the pool (e.g., `ACTIVE`).                                                                   |
| Name         | The full resource path of the pool (e.g., `projects/627426666292/locations/global/workloadIdentityPools/testpool`). |
| Disabled     | Indicates whether the pool is currently disabled.                                                                   |
| Project      | A link to the parent project the pool belongs to.                                                                   |
| Location     | The location of the pool (e.g., `global`).                                                                          |

### **Principals**

Lists the principals (identities/subjects) federated through this workload identity pool, with `Name` and `Principal Type` columns.

### **Providers**

Lists the identity providers (e.g., OIDC, AWS) configured for this workload identity pool, with `Display Name`, `Name` and `Description` columns.