# Create the deployment service account
gcloud iam service-accounts create $DEPLOY_SERVICE_NAME \
    --description="Service account for deploying to Cloud Run" \
    --display-name="Cloud Run Deployer" \
    --project="$PROJECT_ID"
```

### **1.3 Grant Permissions to the Deployment Service Account**

[Section titled “1.3 Grant Permissions to the Deployment Service Account”](#13-grant-permissions-to-the-deployment-service-account)

The deployment service account (used by GitHub Actions to deploy the Cloud Run service) needs permissions to deploy applications and impersonate the service account that runs your Cloud Run application.

Grant the following roles to the **deployment service account** (DEPLOY\_SERVICE\_ACCOUNT):

```bash