.TH "GCLOUD_ALPHA_AUTH_APPLICATION\-DEFAULT" 1



.SH "NAME"
.HP
gcloud alpha auth application\-default \- manage your active Application Default Credentials



.SH "SYNOPSIS"
.HP
\f5gcloud alpha auth application\-default\fR \fICOMMAND\fR [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR Application Default Credentials (ADC) provide a method to get
credentials used in calling Google APIs. The gcloud alpha auth
application\-default command group allows you to manage active credentials on
your machine that are used for local application development.

These credentials are only used by Google client libraries in your own
application.

For more information about ADC and how it works, see Authenticating as a service
account (https://cloud.google.com/docs/authentication/production).



.SH "EXAMPLES"

To use your own user credentials for your application to access an API, run:

.RS 2m
$ gcloud alpha auth application\-default login
.RE

This will take you through a web flow to acquire new user credentials.

To create a service account and have your application use it for API access,
run:

.RS 2m
$ gcloud iam service\-accounts create my\-account
$ gcloud iam service\-accounts keys create key.json \e
    \-\-iam\-account=my\-account@my\-project.iam.gserviceaccount.com
$ export GOOGLE_APPLICATION_CREDENTIALS=key.json
$ ./my_application.sh
.RE



.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-help.

Run \fB$ gcloud help\fR for details.



.SH "COMMANDS"

\f5\fICOMMAND\fR\fR is one of the following:

.RS 2m
.TP 2m
\fBlogin\fR

\fB(ALPHA)\fR Acquire new user credentials to use for Application Default
Credentials.

.TP 2m
\fBprint\-access\-token\fR

\fB(ALPHA)\fR Print an access token for your current Application Default
Credentials.

.TP 2m
\fBrevoke\fR

\fB(ALPHA)\fR Revoke previously generated Application Default Credentials.

.TP 2m
\fBset\-quota\-project\fR

\fB(ALPHA)\fR Update or add a quota project in application default credentials
(ADC).


.RE
.sp

.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. These variants are also available:

.RS 2m
$ gcloud auth application\-default
.RE

.RS 2m
$ gcloud beta auth application\-default
.RE