If we enable IAP for AppEngine and provide a specific service account to the client, will AppEngine and all Google APIs be executed under that sa context or will they still be executed under AppEngine's default sa? Without IAP enabled it appears to be the default sa since I can make requests to my (unprotected) webservice and retrieve data from BigQuery, Datastore, etc.
We would like to have a master project with our AppEngine and other Compute Engine in a "master"-project and then create new projects that hosts each customer's BigQuery data and then give each sa accounts access to AppEngine in the master project and then BigQuery data hosted in their respective projects. One reason is that we can monitor BigQuery expenditure on project level (see how much data are queried by each customer) while also keeping data separate. /Jack -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/67810b81-e9b4-491f-bb6f-1b87f15d98a8%40googlegroups.com.
