NAME
    gcloud alpha iam - manage IAM service accounts and keys

SYNOPSIS
    gcloud alpha iam GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    (ALPHA) The gcloud iam command group lets you manage Google Cloud Identity
    & Access Management (IAM) service accounts and keys.

    Cloud IAM authorizes who can take action on specific resources, giving you
    full control and visibility to manage cloud resources centrally. For
    established enterprises with complex organizational structures, hundreds of
    workgroups and potentially many more projects, Cloud IAM provides a unified
    view into security policy across your entire organization, with built-in
    auditing to ease compliance processes.

    More information on Cloud IAM can be found here:
    https://cloud.google.com/iam and detailed documentation can be found here:
    https://cloud.google.com/iam/docs/.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --help.

    Run $ gcloud help for details.

GROUPS
    GROUP is one of the following:

     oauth-clients
        (ALPHA) Create and manage OAuth clients.

     policies
        (ALPHA) Manage IAM deny policies.

     roles
        (ALPHA) Create and manipulate roles.

     service-accounts
        (ALPHA) Create and manipulate service accounts.

     workforce-pools
        (ALPHA) Create and manage workforce pools.

     workload-identity-pools
        (ALPHA) Manage IAM workload identity pools.

COMMANDS
    COMMAND is one of the following:

     list-grantable-roles
        (ALPHA) List IAM grantable roles for a resource.

     list-testable-permissions
        (ALPHA) List IAM testable permissions for a resource.

NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
    access allowlist. These variants are also available:

        $ gcloud iam

        $ gcloud beta iam

