Method: projects.serviceAccounts.update

Note: We are in the process of deprecating this method. UseserviceAccounts.patch instead.

Updates aServiceAccount.

You can update only thedisplayName field.

HTTP request

PUT https://iam.googleapis.com/v1/{name=projects/*/serviceAccounts/*}

The URL usesgRPC Transcoding syntax.

Path parameters

Parameters
name

string

The resource name of the service account.

Use one of the following formats:

  • projects/{PROJECT_ID}/serviceAccounts/{EMAIL_ADDRESS}
  • projects/{PROJECT_ID}/serviceAccounts/{UNIQUE_ID}

As an alternative, you can use the- wildcard character instead of the project ID:

  • projects/-/serviceAccounts/{EMAIL_ADDRESS}
  • projects/-/serviceAccounts/{UNIQUE_ID}

When possible, avoid using the- wildcard character, because it can cause response messages to contain misleading error codes. For example, if you try to access the service accountprojects/-/serviceAccounts/fake@example.com, which does not exist, the response contains an HTTP403 Forbidden error instead of a404 Not Found error.

Request body

The request body contains data with the following structure:

JSON representation
{"projectId":string,"uniqueId":string,"email":string,"displayName":string,"etag":string,"description":string,"oauth2ClientId":string,"disabled":boolean}
Fields
projectId

string

Output only. The ID of the project that owns the service account.

uniqueId

string

Output only. The unique, stable numeric ID for the service account.

Each service account retains its unique ID even if you delete the service account. For example, if you delete a service account, then create a new service account with the same name, the new service account has a different unique ID than the deleted service account.

email

string

Output only. The email address of the service account.

displayName

string

Optional. A user-specified, human-readable name for the service account. The maximum length is 100 UTF-8 bytes.

etag
(deprecated)

string (bytes format)

Deprecated. Do not use.

A base64-encoded string.

description

string

Optional. A user-specified, human-readable description of the service account. The maximum length is 256 UTF-8 bytes.

oauth2ClientId

string

Output only. The OAuth 2.0 client ID for the service account.

disabled

boolean

Output only. Whether the service account is disabled.

Response body

If successful, the response body contains an instance ofServiceAccount.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/iam
  • https://www.googleapis.com/auth/cloud-platform

For more information, see theAuthentication Overview.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-21 UTC.