.TH "GCLOUD_ALPHA_AUTH" 1



.SH "NAME"
.HP
gcloud alpha auth \- manage oauth2 credentials for the Google Cloud CLI



.SH "SYNOPSIS"
.HP
\f5gcloud alpha auth\fR \fIGROUP\fR | \fICOMMAND\fR [\fIGCLOUD_WIDE_FLAG\ ...\fR]



.SH "DESCRIPTION"

\fB(ALPHA)\fR The \f5gcloud auth\fR command group lets you grant and revoke
authorization to Google Cloud CLI (\f5gcloud\fR CLI) to access Google Cloud.
Typically, when scripting Google Cloud CLI tools for use on multiple machines,
using \f5gcloud auth activate\-service\-account\fR is recommended.

For information about authorization and credential types, see Authorizing the
gcloud CLI (https://cloud.google.com/sdk/docs/authorizing). For information
about authorizing a service account, see Authorizing with a service account
(https://cloud.google.com/sdk/docs/authorizing#service\-account).

After running \f5gcloud auth\fR commands, you can run other commands with
\f5\-\-account\fR=\f5\fIACCOUNT\fR\fR to authenticate the command with the
credentials of the specified account. For information about \f5\-\-account\fR
and other \f5gcloud\fR CLI global flags, see the gcloud CLI overview
(https://cloud.google.com/sdk/gcloud/reference).

See \f5$ gcloud topic client\-certificate\fR to learn how to use Mutual TLS when
using gcloud. Mutual TLS can be used for certificate based access
(https://cloud.google.com/beyondcorp\-enterprise/docs/securing\-resources\-with\-certificate\-based\-access)
with gcloud.



.SH "EXAMPLES"

To authenticate a user account with \f5gcloud\fR and minimal user output, run:

.RS 2m
$ gcloud auth login \-\-brief
.RE

To list all credentialed accounts and identify the current active account, run:

.RS 2m
$ gcloud auth list
.RE

To revoke credentials for a user account (like logging out), run:

.RS 2m
$ gcloud auth revoke test@gmail.com
.RE



.SH "GCLOUD WIDE FLAGS"

These flags are available to all commands: \-\-help.

Run \fB$ gcloud help\fR for details.



.SH "GROUPS"

\f5\fIGROUP\fR\fR is one of the following:

.RS 2m
.TP 2m
\fBapplication\-default\fR

\fB(ALPHA)\fR Manage your active Application Default Credentials.

.TP 2m
\fBenterprise\-certificate\-config\fR

\fB(ALPHA)\fR Manage enterprise certificate configurations.


.RE
.sp

.SH "COMMANDS"

\f5\fICOMMAND\fR\fR is one of the following:

.RS 2m
.TP 2m
\fBactivate\-service\-account\fR

\fB(ALPHA)\fR Authorize access to Google Cloud with a service account.

.TP 2m
\fBconfigure\-docker\fR

\fB(ALPHA)\fR Register \f5gcloud\fR as a Docker credential helper.

.TP 2m
\fBlist\fR

\fB(ALPHA)\fR Lists credentialed accounts.

.TP 2m
\fBlogin\fR

\fB(ALPHA)\fR Authorize gcloud to access the Cloud Platform with Google user
credentials.

.TP 2m
\fBprint\-access\-token\fR

\fB(ALPHA)\fR Print an access token for the specified account.

.TP 2m
\fBprint\-identity\-token\fR

\fB(ALPHA)\fR Print an identity token for the specified account.

.TP 2m
\fBrevoke\fR

\fB(ALPHA)\fR Revoke access credentials for an account.


.RE
.sp

.SH "NOTES"

This command is currently in alpha and might change without notice. If this
command fails with API permission errors despite specifying the correct project,
you might be trying to access an API with an invitation\-only early access
allowlist. These variants are also available:

.RS 2m
$ gcloud auth
.RE

.RS 2m
$ gcloud beta auth
.RE