Gcloud IAM
Service accounts
List/describe service accounts:
gcloud iam service-accounts list
gcloud iam service-accounts describe
Get the IAM policy for a service account:
gcloud iam service-accounts get-iam-policy …@….iam.gserviceaccount.com
Impersonate a serviceAccount:
export GOOGLE_IMPERSONATE_SERVICE_ACCOUNT="…@….iam.gserviceaccount.com"
gcloud …