gcloud iam roles list > gcloud_all_roles.txt # too many roles (277 KB!)

gcloud iam roles list --filter="vision.user" # filter (no entries!)

gcloud projects add-iam-policy-binding prj-id-am-test-240312 --member="serviceAccount:prj-id-am-test-240312@appspot.gserviceaccount.com" --role="roles/serviceusage.serviceUsageConsumer"
# OK!

gcloud config get-value project

# generic
gcloud iam service-accounts list --project=YOUR_PROJECT_ID
gcloud services enable vision.googleapis.com --project=prj-id-am-test-240312

# generic
gcloud iam service-accounts list --project=YOUR_PROJECT_ID
gcloud iam service-accounts list --project=prj-id-am-test-240312

# generic
gcloud projects add-iam-policy-binding YOUR_PROJECT_ID \
  --member="serviceAccount:YOUR_SERVICE_ACCOUNT_EMAIL" \
  --role="roles/vision.user"

gcloud projects add-iam-policy-binding prj-id-am-test-240312 --member="serviceAccount:prj-id-am-test-240312@appspot.gserviceaccount.com" --role="roles/vision.user"

# if there are errors and/or to follow the app execution:
gcloud app logs tail -s default

# full stack trace
gcloud app logs read