Unable to create a new Cloud Function - cloud-client-api-gae

Question

I'm unable to create a Cloud Function in my GCP project using GUI, but have admin roles for GCF, SA and IAM.

Here is the error message:

Missing necessary permission iam.serviceAccounts.actAs for cloud-client-api-gae on the service account [email protected]. Grant the role 'roles/iam.serviceAccountUser' to cloud-client-api-gae on the service account [email protected].

cloud-client-api-gae is not an SA nor User on my IAM list. It must be a creature living underneath Graphical User Interfrace.

I have Enabled API for GCF, AppEngine and I have Service Account Admin role.

I had literally 0 search results when googling for cloud-client-api-gae.

Answer 1

I've contacted GCP support and it seems my user was missing single role: Service Account User - that's it.

PS: Person from support didn't know what this thing called "cloud-client-api-gae" is.