{   
    "authorize" : {

        "registrationToken.accountId" : "cr",
        "physicalHost": "r",
        "physicalHost.driver": "r",
        "physicalHost.externalId": "r",
        "dynamicSchema": "crd",
        "dynamicSchema.accountId": "cr",
        "dynamicSchema.definition": "cr",
        "dynamicSchema.parent": "cr",
        "dynamicSchema.roles": "cr",
        "machineDriver.resourceActions\\..*": "c",
        "machineDriver.resourceActions.create": "",
        "project": "cr",
        "project.allowSystemRole": "cru",
        "project.uuid": "cr",
        "project.name": "cr",
        "project.description": "cr",
        "end" : ""
    }
}

{   
    "authorize" : {

        "certificate.accountId": "cr",
        "registrationToken.accountId" : "cr",
        "physicalHost": "r",
        "physicalHost.driver": "r",
        "physicalHost.externalId": "r",
        "dynamicSchema": "crd",
        "dynamicSchema.accountId": "cr",
        "dynamicSchema.definition": "cr",
        "dynamicSchema.parent": "cr",
        "dynamicSchema.roles": "cr",
        "machineDriver.resourceActions\\..*": "c",
        "machineDriver.resourceActions.create": "",
        "project": "cr",
        "project.allowSystemRole": "cru",
        "project.uuid": "cr",
        "project.name": "cr",
        "project.description": "cr",
        "end" : ""
    }
}

Allow service accounts to set accountId on credentials
Allow service accounts to set accountId on credentials
