← IAM & Service Accounts435 / 640

hardgcloud

View all IAM bindings on a service account resource itself

command

gcloud iam service-accounts get-iam-policy SA_EMAIL

also accepted

gcloud iam service-accounts get-iam-policy

Command breakdown

Part of the Google Cloud CLI (gcloud) — IAM & Service Accounts category.

gcloudiamservice-accountsget-iam-policySA_EMAIL

More IAM & Service Accounts commands

Create a new IAM service account in the current projectgcloud iam service-accounts create SA_NAME --display-name DISPLAY_NAME
List all service accounts in the current projectgcloud iam service-accounts list
Generate and download a new JSON key file for a service accountgcloud iam service-accounts keys create KEY_FILE --iam-account SA_EMAIL
Grant an IAM role to a member on a specific projectgcloud projects add-iam-policy-binding PROJECT_ID --member MEMBER --role ROLE
Retrieve the full IAM policy (all role bindings) for a projectgcloud projects get-iam-policy PROJECT_ID
List all predefined and custom IAM roles available in the projectgcloud iam roles list
Delete a service account and revoke all its associated credentialsgcloud iam service-accounts delete SA_EMAIL
Show details including display name and unique ID for a service accountgcloud iam service-accounts describe SA_EMAIL

See all IAM & Service Accounts commands →

← prev next →

More IAM & Service Accounts commands →Full cheat sheet →

Test your recall — not just your reading.

Practice with interactive quiz →