Document service account namespace permission behavior

[kevinawoo]

Summary

Adds a note to the Service Account update docs explaining that Account Owner and Global Admin service accounts already have Namespace Admin access to all Namespaces.

The note also tells readers not to add explicit Namespace Permissions while using those account-level roles, and to update the Account Level Role and desired Namespace Permissions together when moving a Service Account to a lower-privilege role.

Validation

• npm run build
• git diff --check

Vale was not run because there is no local vale binary in this checkout, and npx vale docs/cloud/get-started/service-accounts.mdx fails because npm has no package versions for vale.

┆Attachments: EDU-6464 [codex] Document service account namespace permission behavior

[vercel]

@kevinawoo is attempting to deploy a commit to the Temporal Team on Vercel.

A member of the Team first needs to authorize it.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
temporal-documentation	Ready	Preview, Comment	Jun 3, 2026 7:04pm