Considering the many ways you can authorize users to access the cloud machines you usually want to stick to a default approach and maybe even one which is endorsed by your cloud provider.
In my case it is GCP and OS Login which allows project users to login by just using there account mail and credentials.
Awesome!
But how can we give an service account access to these machines?