gcloud iam service-accounts

NAME: gcloud iam service-accounts - create and manipulate service accounts
SYNOPSIS: gcloud iam service-accounts GROUP | COMMAND [GCLOUD_WIDE_FLAG …]
DESCRIPTION: Create and manipulate IAM service accounts. A service account is a special Google account that belongs to your application or a VM, instead of to an individual end user. Your application uses the service account to call the Google API of a service, so that the users aren't directly involved.
Note: Service accounts use client quotas for tracking usage.
More information on service accounts can be found at: https://cloud.google.com/iam/docs/service-accounts
GCLOUD WIDE FLAGS: These flags are available to all commands: --help.
Run $ gcloud help for details.
GROUPS: GROUP is one of the following:

keys

Manage service account keys.
COMMANDS: COMMAND is one of the following:

add-iam-policy-binding

Add an IAM policy binding to an IAM service account.

create

Create a service account for a project.

delete

Delete a service account from a project.

describe

Show metadata for a service account from a project.

disable

Disable an IAM service account.

enable

Enable an IAM service account.

get-iam-policy

Get the IAM policy for a service account.

list

List all of a project's service accounts.

remove-iam-policy-binding

Remove IAM policy binding from a service account.

set-iam-policy

Set IAM policy for a service account.

sign-blob

Sign a blob with a managed service account key.

sign-jwt

Sign a JWT with a managed service account key.

undelete

Undelete a service account for a project.

update

Update an IAM service account.
NOTES: These variants are also available:
gcloud alpha iam service-accounts

gcloud beta iam service-accounts