title: On GCP, how to grant access to a service account in another project?
body: <p>I have a compute instance in project <code>project-b</code>, and a separate project <code>project-a</code>. The instance in <code>project-b</code> needs to access <code>project-a</code> using a <code>project-a</code> service account.</p>