Gcloud iam service-accounts --help

NAME
    gcloud iam service-accounts - create and manipulate service accounts

SYNOPSIS
    gcloud iam service-accounts GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Create and manipulate IAM service accounts. A service account is a special
    Google account that belongs to your application or a VM, instead of to an
    individual end user. Your application uses the service account to call the
    Google API of a service, so that the users aren't directly involved.

    Note: Service accounts use client quotas for tracking usage.

    More information on service accounts can be found at:
    https://cloud.google.com/iam/docs/service-accounts

GCLOUD WIDE FLAGS
    These flags are available to all commands: --help.

    Run $ gcloud help for details.

GROUPS
    GROUP is one of the following:

     keys
        Manage service account keys.

COMMANDS
    COMMAND is one of the following:

     add-iam-policy-binding
        Add an IAM policy binding to an IAM service account.

     create
        Create a service account for a project.

     delete
        Delete a service account from a project.

     describe
        Show metadata for a service account from a project.

     disable
        Disable an IAM service account.

     enable
        Enable an IAM service account.

     get-iam-policy
        Get the IAM policy for a service account.

     list
        List all of a project's service accounts.

     remove-iam-policy-binding
        Remove IAM policy binding from a service account.

     set-iam-policy
        Set IAM policy for a service account.

     sign-blob
        Sign a blob with a managed service account key.

     sign-jwt
        Sign a JWT with a managed service account key.

     undelete
        Undelete a service account for a project.

     update
        Update an IAM service account.

See also

• gcloud iam [ roles | service-accounts | get-iam-policy | roles describe ], gcloud asset search-all-iam-policies, list-grantable-roles