def __find_service_account_in_message(message):
        """
        The command "gcloud logging sinks create", communicates a service account Id as part of its message.
        Knowing the message format, this function extracts the service account Id and returns it to the caller,
        which will grant it with BQ permissions.

        Sample message:
        "Created [https://logging.googleapis.com/v2/projects/hipaa-sample-project/sinks/audit-logs-to-bigquery].
        Please remember to grant `serviceAccount:p899683180883-075251@gcp-sa-logging.iam.gserviceaccount.com` the WRITER role on the dataset.
        More information about sinks can be found at https://cloud.google.com/logging/docs/export/configure_export"

        :param message: the message communicated by "gcloud logging sinks create" command

        :return: the service account Id that requires BQ permissions
        """
        service_account = [t for t in message.split() if t.startswith('`serviceAccount:')]
        if service_account:
            service_account = service_account[0].replace('`', '')
            service_account = service_account.replace('serviceAccount:', '')

        return service_account