gcloud alpha iam roles copy - create a role from an existing role
gcloud alpha iam roles copy [--dest-organization=DEST_ORGANIZATION] [--dest-project=DEST_PROJECT] [--destination=DESTINATION] [--source=SOURCE] [--source-organization=SOURCE_ORGANIZATION] [--source-project=SOURCE_PROJECT] [GCLOUD_WIDE_FLAG ...]
(ALPHA) This command creates a role from an existing role.
To create a copy of an existing role spanner.databaseAdmin into an organization with 1234567, run:
$ gcloud alpha iam roles copy \ --source="roles/spanner.databaseAdmin" \ --destination=CustomViewer --dest-organization=1234567
To create a copy of an existing role spanner.databaseAdmin into a project with PROJECT_ID, run:
$ gcloud alpha iam roles copy \ --source="roles/spanner.databaseAdmin" \ --destination=CustomSpannerDbAdmin --dest-project=PROJECT_ID
To modify the newly created role see the roles update command.
- --dest-organization=DEST_ORGANIZATION
The organization of the destination role.
- --dest-project=DEST_PROJECT
The project of the destination role.
- --destination=DESTINATION
The destination role ID for the new custom role. For example: viewer.
- --source=SOURCE
The source role ID. For predefined roles, for example: roles/viewer. For custom roles, for example: myCompanyAdmin.
- --source-organization=SOURCE_ORGANIZATION
The organization of the source role if it is an custom role.
- --source-project=SOURCE_PROJECT
The project of the source role if it is an custom role.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
$ gcloud iam roles copy
$ gcloud beta iam roles copy