serviceAccountUserId

The id of the service account that is assigned the role (the service account of the client that "consumes" the role).