The service account e-mail address. If not given, the default Google Compute Engine service account is used.
A list of service scopes. Both OAuth2 URLs and gcloud short names are supported. To allow full access to all Cloud APIs, use the cloud-platform scope. See a complete list of scopes here.
cloud-platform