add_user_permission_to_use_service_account.sh

PROJECT_ID="" # PUT YOUR PROJECT ID
SERVICE_ACCOUNT_NAME="" # Service account name
GOOGLE_ACCOUNT_MAIL="" # user mail
gcloud iam service-accounts add-iam-policy-binding \
    "${SERVICE_ACCOUNT_NAME}@${PROJECT_ID}.iam.gserviceaccount.com" \
    --member="user:${GOOGLE_ACCOUNT_MAIL}" --role="roles/iam.serviceAccountUser"
    
# Replace osAdminLogin with osLogin if you do NOT want the user to have an
# ability to act as root.
gcloud projects add-iam-policy-binding ${PROJECT_ID} \
    --member="serviceAccount:${SERVICE_ACCOUNT_NAME}@${PROJECT_ID}.iam.gserviceaccount.com" \
    --role="roles/compute.osAdminLogin"