.TH "GCLOUD_AUTH" 1



.SH "NAME"
.HP
gcloud auth \- manage oauth2 credentials for the Google Cloud CLI



.SH "SYNOPSIS"
.HP
\f5gcloud auth\fR \fIGROUP\fR | \fICOMMAND\fR [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

The \f5gcloud auth\fR command group lets you grant and revoke authorization to
Google Cloud CLI (\f5gcloud\fR CLI) to access Google Cloud. Typically, when
scripting Google Cloud CLI tools for use on multiple machines, using \f5gcloud
auth activate\-service\-account\fR is recommended.

For information about authorization and credential types, see Authorizing the
gcloud CLI (https://cloud.google.com/sdk/docs/authorizing). For information
about authorizing a service account, see Authorizing with a service account
(https://cloud.google.com/sdk/docs/authorizing#service\-account).

After running \f5gcloud auth\fR commands, you can run other commands with
\f5\-\-account\fR=\f5\fIACCOUNT\fR\fR to authenticate the command with the
credentials of the specified account. For information about \f5\-\-account\fR
and other \f5gcloud\fR CLI global flags, see the gcloud CLI overview
(https://cloud.google.com/sdk/gcloud/reference).

See \f5$ gcloud topic client\-certificate\fR to learn how to use Mutual TLS when
using gcloud. Mutual TLS can be used for certificate based access
(https://cloud.google.com/beyondcorp\-enterprise/docs/securing\-resources\-with\-certificate\-based\-access)
with gcloud.



.SH "EXAMPLES"

To authenticate a user account with \f5gcloud\fR and minimal user output, run:

.RS 2m
$ gcloud auth login \-\-brief
.RE

To list all credentialed accounts and identify the current active account, run:

.RS 2m
$ gcloud auth list
.RE

To revoke credentials for a user account (like logging out), run:

.RS 2m
$ gcloud auth revoke test@gmail.com
.RE



.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-help.

Run \fB$ gcloud help\fR for details.



.SH "GROUPS"

\f5\fIGROUP\fR\fR is one of the following:

.RS 2m
.TP 2m
\fBapplication\-default\fR

Manage your active Application Default Credentials.

.TP 2m
\fBenterprise\-certificate\-config\fR

Manage enterprise certificate configurations.


.RE
.sp

.SH "COMMANDS"

\f5\fICOMMAND\fR\fR is one of the following:

.RS 2m
.TP 2m
\fBactivate\-service\-account\fR

Authorize access to Google Cloud with a service account.

.TP 2m
\fBconfigure\-docker\fR

Register \f5gcloud\fR as a Docker credential helper.

.TP 2m
\fBlist\fR

Lists credentialed accounts.

.TP 2m
\fBlogin\fR

Authorize gcloud to access the Cloud Platform with Google user credentials.

.TP 2m
\fBprint\-access\-token\fR

Print an access token for the specified account.

.TP 2m
\fBprint\-identity\-token\fR

Print an identity token for the specified account.

.TP 2m
\fBrevoke\fR

Revoke access credentials for an account.


.RE
.sp

.SH "NOTES"

These variants are also available:

.RS 2m
$ gcloud alpha auth
.RE

.RS 2m
$ gcloud beta auth
.RE