API access to GCP control plane

I have 开发者_运维百科an app that is built in Java and runs on app engine. This app will be installed by users in their own GCP account.

I want to build the capability where

1. Users can come to my website
2. Users can use “login with google” and provide access to my website.
3. My website app will use GCP API to create a project and install the application with app engine.
4. Also, want this permission to be temporary for 1 hr.

Is there a guide or documentation to do this?