Service Accounts

The Service Accounts page provides a list of enumerated Service Accounts in GCP.

Service Accounts Details

The Details page includes the Details tab, and a Visualize button for enhanced navigation and analysis.

You can analyze objects in the Graph module by clicking the Visualize button on the upper left side.

Service Account Details

Information

The Details tab contains attributes about the GCP Service Account. Risk and Exposure scores are displayed at the top of the page, along with privilege badges such as Tier 0 and Privileged. An Issues panel on the right lists detected security findings.

Attribute	Description
Display Name	The human-readable name of the service account (e.g., Forestall Privileged).
Service Account ID	The full email-format identifier of the service account (e.g., [e-mail]).
Name	The full resource name of the service account.
Parent Project	The GCP project this service account belongs to.
Unique ID	The unique numeric identifier of the service account.
Email	The email address associated with the service account, used for IAM bindings.
Description	A text description of the service account's purpose.
Disabled	Indicates whether the service account is currently disabled.
OAuth2 Client ID	The OAuth2 client ID associated with the service account, used for authentication flows.

Service Account Keys

List all Service Account Keys binded to that service account.