Gcloud

Impersonating

GOOGLE_OAUTH_ACCESS_TOKEN=$(gcloud --impersonate-service-account=user@domain auth print-access-token)