gcloud iam service-accounts

NAME
gcloud iam service-accounts - create and manipulate service accounts
SYNOPSIS
gcloud iam service-accountsGROUP |COMMAND[GCLOUD_WIDE_FLAG …]
DESCRIPTION
Create and manipulate IAM service accounts. A service account is a specialGoogle account that belongs to your application or a VM, instead of to anindividual end user. Your application uses the service account to call theGoogle API of a service, so that the users aren't directly involved.

Note: Service accounts use client quotas for tracking usage.

More information on service accounts can be found at:https://cloud.google.com/iam/docs/service-accounts

GCLOUD WIDE FLAGS
These flags are available to all commands:--help.

Run$gcloud help for details.

GROUPS
GROUP is one of the following:
keys
Manage service account keys.
COMMANDS
COMMAND is one of the following:
add-iam-policy-binding
Add an IAM policy binding to an IAM service account.
create
Create a service account for a project.
delete
Delete a service account from a project.
describe
Show metadata for a service account from a project.
disable
Disable an IAM service account.
enable
Enable an IAM service account.
get-iam-policy
Get the IAM policy for a service account.
list
List all of a project's service accounts.
remove-iam-policy-binding
Remove IAM policy binding from a service account.
set-iam-policy
Set IAM policy for a service account.
sign-blob
Sign a blob with a managed service account key.
sign-jwt
Sign a JWT with a managed service account key.
undelete
Undelete a service account for a project.
update
Update an IAM service account.
NOTES
These variants are also available:
gcloudalphaiamservice-accounts
gcloudbetaiamservice-accounts

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-05-07 UTC.