What is the difference between --impersonate and --service-account-email when using Flex Templates in dataflow?

Question

I\'m having a hard time to understand the difference between --impersonate and --service-account-email when using gcloud dataflow flex-template r