diff --git a/cmd/ocm/gcp/create-wif-config.go b/cmd/ocm/gcp/create-wif-config.go
index 8c4b4a05..273febf2 100644
--- a/cmd/ocm/gcp/create-wif-config.go
+++ b/cmd/ocm/gcp/create-wif-config.go
@@ -367,6 +367,9 @@ func createServiceAccounts(ctx context.Context, gcpClient gcp.GcpClient, wifConf
 				return errors.Wrapf(err, "Failed to attach workload identity pool to service account %s",
 					serviceAccount.ServiceAccountId())
 			}
+		case cmv1.WifAccessMethodVm:
+			// Service accounts with the "vm" access method require no external access
+			continue
 		default:
 			log.Printf("Warning: %s is not a supported access type\n", serviceAccount.AccessMethod())
 		}