You can use pipeline permissions as an alternative to manually managing Fiat Service Accounts . Without pipeline permissions, a Spinnaker operator first has to create a Fiat Service account with the correct permissions. A user can then specify the service account as the RunAsUser per automated trigger.