gcloud access-context-manager cloud-bindings update

NAME

gcloud access-context-manager cloud-bindings update - update a existing cloud access binding under an organization

SYNOPSIS

gcloud access-context-manager cloud-bindings update (--binding=BINDING : --organization=ORGANIZATION) [--binding-file=YAML_FILE] [--dry-run-level=[DRY_RUN_LEVEL,…]] [--level=[LEVEL,…]] [GCLOUD_WIDE_FLAG …]

DESCRIPTION

Update an existing cloud access binding. You can update the level, dry run level and scoped access settings. They can't all be empty.

EXAMPLES

To update an existing cloud access binding, run:

gcloud access-context-manager cloud-bindings update --binding=my-binding-id --level=accessPolicies/123/accessLevels/new-abc

To remove level and add dry run level, run:

gcloud access-context-manager cloud-bindings update --binding=my-binding-id --level= --dry-run-level=accessPolicies/123/accessLevels/new-def

To update scoped access settings, run:

gcloud access-context-manager cloud-bindings update --binding=my-binding-id --binding-file='binding.yaml'

REQUIRED FLAGS

Cloud access binding resource - The cloud access binding you want to update. The arguments in this group can be used to specify the attributes of this resource.

This must be specified.

--binding=BINDING

ID of the cloud-access-binding or fully qualified identifier for the cloud-access-binding.

To set the binding attribute:

• provide the argument --binding on the command line.

This flag argument must be specified if any of the other arguments in this group are specified.

--organization=ORGANIZATION

The ID of the organization. To set the organization attribute:

• provide the argument --binding on the command line with a fully specified name;
• provide the argument --organization on the command line;
• set the property access_context_manager/organization.

OPTIONAL FLAGS

--binding-file=YAML_FILE

Path to the file that contains a Google Cloud Platform user access binding.

This file contains a YAML-compliant object representing a GcpUserAccessBinding (as described in the API reference) containing ScopedAccessSettings only. No other binding fields are allowed.

The file content replaces the corresponding fields in the existing binding.

--dry-run-level=[DRY_RUN_LEVEL,…]

The dry run access level that replaces the existing dry run level for the given binding. The input must be the full identifier of an access level, such as accessPolicies/123/accessLevels/new-def.

--level=[LEVEL,…]

The access level that replaces the existing level for the given binding. The input must be the full identifier of an access level, such as accessPolicies/123/accessLevels/new-abc.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

API REFERENCE

This command uses the accesscontextmanager/v1 API. The full documentation for this API can be found at: https://cloud.google.com/access-context-manager/docs/reference/rest/

NOTES

This variant is also available:

gcloud alpha access-context-manager cloud-bindings update