An article goes into detail on how to set up and use service account impersonation.

Google Cloud – Improving Security with Impersonation

To configure the CLI to use impersonation by default:
gcloud config set auth/impersonate_service_account [SA_FULL_EMAIL]

To clear this setting:
gcloud config unset auth/impersonate_service_account

Support On Demand!

Cloud