boundServiceAccounts

GCP Service Accounts allowed to issue tokens under this role. (Note: Required if role is iam)