gcloud iam - manage IAM service accounts and keys

gcloud iamGROUP |COMMAND[GCLOUD_WIDE_FLAG …]

Cloud IAM authorizes who can take action on specific resources, giving you fullcontrol and visibility to manage cloud resources centrally. For establishedenterprises with complex organizational structures, hundreds of workgroups andpotentially many more projects, Cloud IAM provides a unified view into securitypolicy across your entire organization, with built-in auditing to easecompliance processes.

More information on Cloud IAM can be found here:https://cloud.google.com/iam anddetailed documentation can be found here:https://cloud.google.com/iam/docs/.

Run$gcloud help for details.

oauth-clients

Create and manage OAuth clients.

policies

Manage IAM deny policies.

policy-bindings

Manage policy bindings.

principal-access-boundary-policies

Manage principal access boundary policies.

roles

Create and manipulate roles.

service-accounts

Create and manipulate service accounts.

simulator

Understand how an IAM policy change could impact access before deploying thechange.

workforce-pools

Create and manage workforce pools.

workload-identity-pools

Manage IAM workload identity pools.

list-grantable-roles

List IAM grantable roles for a resource.

list-testable-permissions

List IAM testable permissions for a resource.