gcloud beta iam - manage IAM service accounts and keys
gcloud beta iam GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]
(BETA) The gcloud iam command group lets you manage Google Cloud Identity & Access Management (IAM) service accounts and keys.
Cloud IAM authorizes who can take action on specific resources, giving you full control and visibility to manage cloud resources centrally. For established enterprises with complex organizational structures, hundreds of workgroups and potentially many more projects, Cloud IAM provides a unified view into security policy across your entire organization, with built-in auditing to ease compliance processes.
More information on Cloud IAM can be found here: https://cloud.google.com/iam and detailed documentation can be found here: https://cloud.google.com/iam/docs/
These flags are available to all commands: --help.
Run $ gcloud help for details.
GROUP is one of the following:
- policies
(BETA) Manage IAM deny policies.
- roles
(BETA) Create and manipulate roles.
- service-accounts
(BETA) Create and manipulate service accounts.
- workload-identity-pools
(BETA) Manage IAM workload identity pools.
COMMAND is one of the following:
- list-grantable-roles
(BETA) List IAM grantable roles for a resource.
- list-testable-permissions
(BETA) List IAM testable permissions for a resource.
This command is currently in beta and might change without notice. These variants are also available:
$ gcloud iam
$ gcloud alpha iam