- NAME
-
- gcloud auth - manage oauth2 credentials for the Google Cloud CLI
- SYNOPSIS
-
-
gcloud authGROUP|COMMAND[GCLOUD_WIDE_FLAG …]
-
- DESCRIPTION
-
The
gcloud authcommand group lets you grant and revoke authorization to Google Cloud CLI (gcloudCLI) to access Google Cloud. Typically, when scripting Google Cloud CLI tools for use on multiple machines, usinggcloud auth activate-service-accountis recommended.For information about authorization and credential types, see Authorizing the gcloud CLI. For information about authorizing a service account, see Authorizing with a service account.
After running
gcloud authcommands, you can run other commands with--account=to authenticate the command with the credentials of the specified account. For information aboutACCOUNT--accountand othergcloudCLI global flags, see the gcloud CLI overview.See
$ gcloud topic client-certificateto learn how to use Mutual TLS when using gcloud. Mutual TLS can be used for certificate based access with gcloud. - EXAMPLES
-
To authenticate a user account with
gcloudand minimal user output, run:gcloud auth login --briefTo list all credentialed accounts and identify the current active account, run:
gcloud auth listTo revoke credentials for a user account (like logging out), run:
gcloud auth revoke test@gmail.com - GCLOUD WIDE FLAGS
-
These flags are available to all commands:
--help.Run
$ gcloud helpfor details. - GROUPS
-
is one of the following:GROUPapplication-default- Manage your active Application Default Credentials.
enterprise-certificate-config- Manage enterprise certificate configurations.
- COMMANDS
-
is one of the following:COMMANDactivate-service-account- Authorize access to Google Cloud with a service account.
configure-docker-
Register
gcloudas a Docker credential helper. list- Lists credentialed accounts.
login- Authorize gcloud to access the Cloud Platform with Google user credentials.
print-access-token- Print an access token for the specified account.
print-identity-token- Print an identity token for the specified account.
revoke- Revoke access credentials for an account.
- NOTES
-
These variants are also available:
gcloud alpha authgcloud beta auth
gcloud auth
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-08-26 UTC.