gcloud iam policies get - get a policy on the given attachment point with the given name
gcloud iam policies get POLICY_ID --attachment-point=ATTACHMENT_POINT --kind=KIND [GCLOUD_WIDE_FLAG ...]
Get a policy on the given attachment point with the given name.
The following command gets the IAM policy defined at the resource project 123 of kind denypolicies and id my-deny-policy:
$ gcloud iam policies get my-deny-policy \ --attachment-point=cloudresourcemanager.googleapis.com/\ projects/123 --kind=denypolicies
- POLICY_ID
Policy ID that is unique for the resource to which the policy is attached.
- --attachment-point=ATTACHMENT_POINT
Resource to which the policy is attached. For valid formats, see https://cloud.google.com/iam/help/deny/attachment-point.
- --kind=KIND
Policy type. Use denypolicies for deny policies.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
These variants are also available:
$ gcloud alpha iam policies get
$ gcloud beta iam policies get