The plain-English version
An identity intended for software or an automated workload rather than an individual person.
Why it matters
It makes workload permissions and credential management explicit.
Let’s make it click
A report job has permission to read a particular dataset and write its output location.
Vibe Bro’s heads-up
A broadly privileged shared account makes attribution and containment harder; define the minimum required resources and credential lifecycle.
The docs behind it
Documentation links checked .
Editorial review · October 28, 2026
Supported: Service accounts represent workloads, and narrow resource permissions plus credential lifecycle reduce shared-identity risk.