In the google cloud gui console I went to &quot;IAM &amp; admin&quot; &gt; &quot;Service accounts&quot; and created a service account named &quot;my-service-account&quot; with the viewer role.

I then ran this command:

    gcloud iam service-accounts get-iam-policy my-service-account@mydomain.iam.gserviceaccount.com

and saw this output:

    etag: ACAB

According to the docs this means this service account has no policy associated with it. So I assigned it a &quot;role&quot; which is not included in its &quot;policy&quot;.

How do I list the roles associated with a service account?

EDIT:
Thanks to the excellent answer to this question I can now loop over all projects and get what I want. so, depending on your version of these cmd tools, this should list all role bindings of a single service account across all projects:

    gcloud projects list | \
      awk &#39;{print $1}&#39; | \
      xargs -I % sh -c &quot;echo &quot;&quot;; echo project:% &amp;&amp; \
      gcloud projects get-iam-policy % \
      --flatten=&#39;bindings[].members&#39; \
      --format=&#39;table(bindings.role)&#39; \
      --filter=&#39;bindings.members:YOU-SERVICE-ACCOUNT@blah.com&#39; \
      ;&quot; 

All Google Cloud-Iam Solutions on Gang of Coders

Total of 1 Google Cloud-Iam Solutions

How do I list the roles associated with a gcp service account?