'Unable to create a new Cloud Function - cloud-client-api-gae

I'm unable to create a Cloud Function in my GCP project using GUI, but have admin roles for GCF, SA and IAM.

Here is the error message:

Missing necessary permission iam.serviceAccounts.actAs for cloud-client-api-gae on the service account [email protected]. Grant the role 'roles/iam.serviceAccountUser' to cloud-client-api-gae on the service account [email protected].

cloud-client-api-gae is not an SA nor User on my IAM list. It must be a creature living underneath Graphical User Interfrace.

I have Enabled API for GCF, AppEngine and I have Service Account Admin role.

I had literally 0 search results when googling for cloud-client-api-gae.



Solution 1:[1]

Saw the same thing. You need Service account user on the SA you plan to deploy the CF onto. The same incorrect identity was shown.

Solution 2:[2]

The user account attempting to create cloud function, need to be given "Service account user" role on the Service account they are using for this cloud function to run on.

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 Mike
Solution 2 Ganesh M