update dataflow job service_account_email docs (#10607) (#7323)

[upstream:06c490784accc88b81c1e191e4cc7db373baa5e6]

Signed-off-by: Modular Magician <[email protected]>

Author: modular-magician

website/docs/r/dataflow_flex_template_job.html.markdown

@@ -136,7 +136,7 @@ provided, the provider project is used.
 
 * `sdk_container_image` - (Optional) Docker registry location of container image to use for the 'worker harness. Default is the container for the version of the SDK. Note this field is only valid for portable pipelines.
 
-* `service_account_email` - (Optional) Service account email to run the workers as.
+* `service_account_email` - (Optional) Service account email to run the workers as. This should be just an email e.g. `[email protected]`. Do not include any `serviceAccount:` or other prefix.
 
 * `skip_wait_on_job_termination` - (Optional)  If set to `true`, terraform will
 treat `DRAINING` and `CANCELLING` as terminal states when deleting the resource,

website/docs/r/dataflow_job.html.markdown

@@ -116,7 +116,7 @@ The following arguments are supported:
 * `project` - (Optional) The project in which the resource belongs. If it is not provided, the provider project is used.
 * `zone` - (Optional) The zone in which the created job should run. If it is not provided, the provider zone is used.
 * `region` - (Optional) The region in which the created job should run.
-* `service_account_email` - (Optional) The Service Account email used to create the job.
+* `service_account_email` - (Optional) The Service Account email used to create the job. This should be just an email e.g. `[email protected]`. Do not include any `serviceAccount:` or other prefix.
 * `network` - (Optional) The network to which VMs will be assigned. If it is not provided, "default" will be used.
 * `subnetwork` - (Optional) The subnetwork to which VMs will be assigned. Should be of the form "regions/REGION/subnetworks/SUBNETWORK". If the [subnetwork is located in a Shared VPC network](https://cloud.google.com/dataflow/docs/guides/specifying-networks#shared), you must use the complete URL. For example `"googleapis.com/compute/v1/projects/PROJECT_ID/regions/REGION/subnetworks/SUBNET_NAME"`
 * `machine_type` - (Optional) The machine type to use for the job.