gcloud iam policies update - update the policy on the given attachment point with the given name
gcloud iam policies update POLICY_ID --attachment-point=ATTACHMENT_POINT --kind=KIND --policy-file=POLICY_FILE [GCLOUD_WIDE_FLAG ...]
Update the policy on the given attachment point with the given name.
The following command updates the IAM policy defined at the resource project 123 of kind denypolicies and id my-deny-policy:
$ gcloud iam policies update my-deny-policy \ --attachment-point=cloudresourcemanager.googleapis.com/\ projects/123 --kind=denypolicies --policy-file=policy.json
- POLICY_ID
Policy ID that is unique for the resource to which the policy is attached.
- --attachment-point=ATTACHMENT_POINT
Resource to which the policy is attached. For valid formats, see https://cloud.google.com/iam/help/deny/attachment-point.
- --kind=KIND
Policy type. Use denypolicies for deny policies.
- --policy-file=POLICY_FILE
Path to the file that contains the policy, in JSON or YAML format. For valid syntax, see https://cloud.google.com/iam/help/deny/policy-syntax.
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
These variants are also available:
$ gcloud alpha iam policies update
$ gcloud beta iam policies update