Is it possible to config which service account a cloud function uses?

[chinesehemp]

I have an express app which I've deployed as a gen2 function; by default, this function runs under the default compute service account. I want to limit the permissions on this function by creating a custom IAM service account and configuring the cloud-run container to use this account instead. I know this is possible via the gcloud cli, but I'd have to update my functions, and I'd rather keep it all managed via the firebase cli. I was wondering if this is possible. Thanks :)

[taeold]

Yes it's possible! Here's an example:

const {onRequest} = require("firebase-functions/v2/https");

exports.hello = onRequest(
  {
    serviceAccount: "your-service-account@"
  },
  (req, res) => {
    res.sendStatus(200);
  });

[chinesehemp]

Thank you @taeold