How to handle multiple roles

[SpielerNogard]

Hey everyone, 
Im new to GCP and coming from AWS. Since our company only have a few people, every single one has to do multiple tasks. But for every task i want to make sure we are following the principle of least privilege. 

In AWS this was easy, every user had multiple roles and can easily switch between them. In GCP i`ve created multiple roles and the user always has the combination of them all. Then i tried service accounts, which work for CLI but not for the webinterface. 

Has someone any ideas, how i can create multiple roles per user and let them switch between them, in cli, SDK and web ?