gcloud beta iam roles copy - create a role from an existing role
gcloud beta iam roles copy [--dest-organization=DEST_ORGANIZATION] [--dest-project=DEST_PROJECT] [--destination=DESTINATION] [--source=SOURCE] [--source-organization=SOURCE_ORGANIZATION] [--source-project=SOURCE_PROJECT] [GCLOUD_WIDE_FLAG ...]
(BETA) This command creates a role from an existing role.
To create a copy of an existing role spanner.databaseAdmin into an organization with 1234567, run:
$ gcloud beta iam roles copy \ --source="roles/spanner.databaseAdmin" \ --destination=CustomViewer --dest-organization=1234567
To create a copy of an existing role spanner.databaseAdmin into a project with PROJECT_ID, run:
$ gcloud beta iam roles copy \ --source="roles/spanner.databaseAdmin" \ --destination=CustomSpannerDbAdmin --dest-project=PROJECT_ID
To modify the newly created role see the roles update command.
- --dest-organization=DEST_ORGANIZATION
The organization of the destination role.
- --dest-project=DEST_PROJECT
The project of the destination role.
- --destination=DESTINATION
The destination role ID for the new custom role. For example: viewer.
- --source=SOURCE
The source role ID. For predefined roles, for example: roles/viewer. For custom roles, for example: myCompanyAdmin.
- --source-organization=SOURCE_ORGANIZATION
The organization of the source role if it is an custom role.
- --source-project=SOURCE_PROJECT
The project of the source role if it is an custom role.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
This command is currently in beta and might change without notice. These variants are also available:
$ gcloud iam roles copy
$ gcloud alpha iam roles copy