如何通过Python添加对某些服务账号、特定Google Storage Bucket的访问权限？

from google.cloud import storage

# 创建一个存储客户端
client = storage.Client()

from google.oauth2 import service_account

# 服务账号的JSON凭据路径
credentials_path = 'path/to/service_account_credentials.json'

# 从JSON凭据文件创建服务账号对象
credentials = service_account.Credentials.from_service_account_file(
    credentials_path,
    scopes=['https://www.googleapis.com/auth/cloud-platform']
)

# 添加服务账号的访问权限
client = storage.Client(credentials=credentials)

# 指定要授权的Bucket名称
bucket_name = 'your_bucket_name'

# 获取指定的Bucket对象
bucket = client.bucket(bucket_name)

# 创建一个IAM策略对象
policy = bucket.iam.get_policy(requested_policy_version=3)

# 添加服务账号的访问权限
policy.bindings.add(
    role='roles/storage.admin',
    members=['serviceAccount:your-service-account@your-project.iam.gserviceaccount.com']
)

# 更新Bucket的IAM策略
bucket.iam.set_policy(policy)