gcloud auth application-default

NAME
gcloud auth application-default - manage your active Application Default Credentials
SYNOPSIS
gcloud auth application-defaultCOMMAND[GCLOUD_WIDE_FLAG …]
DESCRIPTION
Application Default Credentials (ADC) provide a method to get credentials usedin calling Google APIs. The gcloud auth application-default command group allowsyou to manage active credentials on your machine that are used for localapplication development.

These credentials are only used by Google client libraries in your ownapplication.

For more information about ADC and how it works, seeAuthenticating asa service account.

EXAMPLES
To use your own user credentials for your application to access an API, run:
gcloudauthapplication-defaultlogin

This will take you through a web flow to acquire new user credentials.

To create a service account and have your application use it for API access,run:

gcloudiamservice-accountscreatemy-accountgcloudiamservice-accountskeyscreatekey.json--iam-account=my-account@my-project.iam.gserviceaccount.comexportGOOGLE_APPLICATION_CREDENTIALS=key.json./my_application.sh
GCLOUD WIDE FLAGS
These flags are available to all commands:--help.

Run$gcloud help for details.

COMMANDS
COMMAND is one of the following:
login
Acquire new user credentials to use for Application Default Credentials.
print-access-token
Print an access token for your current Application Default Credentials.
revoke
Revoke previously generated Application Default Credentials.
set-quota-project
Update or add a quota project in application default credentials (ADC).
NOTES
These variants are also available:
gcloudalphaauthapplication-default
gcloudbetaauthapplication-default

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.