gcloud auth to service accounts is allowed. User accounts are the default for interactive use because people tend to know their Google creds.
Multiple service accounts are allowed. Create 50 of these with suitable IAM roles. Distribute unique keys to everyone for use in gcloud auth activate-service-account.
I think the console requires a Google user account.
You as project owner can revoke any of this at any time.