Service accounts can be used to allow limited access control and can be used without the need for the usual web authentication journey that is typically used when authenticating the gcloud SDK. These are ideal for use in a CI setup.