Script to retrieve GCP IAM roles, users and serviceaccounts, must be used in conjunction with iam-json-reformat.py

gcp_iam_user_list-extraction.sh

#!/bin/bash
# Script to retrieve GCP IAM roles, users and serviceaccounts
# Author - Alejandro Leal [email protected] (Originally from Rajathithan Rajasekar)

echo 'project-id,roles/rolename,user:username-and-serviceaccounts' > iamlist.csv
prjs=( $(gcloud projects list | awk '/PROJECT_ID/{print $2}') )
for i in "${prjs[@]}"
do
    echo "------------------------------------------------------------"
    echo "Collecting IAM roles & users for Project: $i"
    gcloud projects get-iam-policy "$i" --format="table(bindings)[0]" | sed -e 's/^\w*\ *//' | tail -c +2 | python iam-json-reformat.py "$i" >> iamlist.csv
done