gcloud alpha iam policies get - get a policy on the given attachment point with the given name
gcloud alpha iam policies get POLICY_ID --attachment-point=ATTACHMENT_POINT --kind=KIND [GCLOUD_WIDE_FLAG ...]
(ALPHA) Get a policy on the given attachment point with the given name.
The following command gets the IAM policy defined at the resource project 123 of kind denypolicies and id my-deny-policy:
$ gcloud alpha iam policies get my-deny-policy \ --attachment-point=cloudresourcemanager.googleapis.com/\ projects/123 --kind=denypolicies
- POLICY_ID
Policy ID that is unique for the resource to which the policy is attached.
- --attachment-point=ATTACHMENT_POINT
Resource to which the policy is attached. For valid formats, see https://cloud.google.com/iam/help/deny/attachment-point.
- --kind=KIND
Policy type. Use denypolicies for deny policies.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
$ gcloud iam policies get
$ gcloud beta iam policies get