login
gcloud auth login
login with service account where 11428-524505c7e378.json is downloaded from 11428 project
gcloud auth activate-service-account --key-file=11428-524505c7e378.json
list auth
gcloud auth list
set active account
gcloud config set account ${ACCOUNT}
list IAM roles in folder for princpal(e.g. sa)
gcloud resource-manager folders get-iam-policy ${FOLDER_ID} --flatten='bindings[].members' --filter="bindings.members:serviceaccount:${SA_EMAIL}" --format='value(bindings.role)'
list IAM roles in org for princpal (e.g. user)
gcloud organizations get-iam-policy ${ORG_ID} --flatten='bindings[].members' --filter="bindings.members:user:${USER}" --format='value(bindings.role)'
list projects per folder(parent_id)
gcloud projects list --filter='parent.id:${FOLDER_ID}'
list subfolders
gcloud resource-manager folders list --folder=${FOLDER_ID}
list top tier folders
gcloud resource-manager folders list --organization=${ORG_ID}