- NAME
- 
- gcloud beta compute instances set-iam-policy - set IAM policy for a Compute Engine instance
 
- SYNOPSIS
- 
- 
gcloud beta compute instances set-iam-policy(INSTANCE:--zone=ZONE)POLICY_FILE[GCLOUD_WIDE_FLAG …]
 
- 
- DESCRIPTION
- 
(BETA)Set IAM policy for a Compute Engine instance.
- EXAMPLES
- 
The following command reads an IAM policy defined in a JSON file
policy.jsonand sets it for the instance 'my-instance' and zone 'ZONE':gcloud beta compute instances set-iam-policy my-instance --zone=ZONE policy.jsonSee https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types. 
- POSITIONAL ARGUMENTS
- 
- 
Instance resource - The instance to set the IAM policy of. The arguments in this
group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
To set the projectattribute:- 
provide the argument instanceon the command line with a fully specified name;
- 
provide the argument --projecton the command line;
- 
set the property core/project.
 This must be specified. - INSTANCE
- 
ID of the instance or fully qualified identifier for the instance.
To set the instanceattribute:- 
provide the argument instanceon the command line.
 This positional argument must be specified if any of the other arguments in this group are specified. 
- 
provide the argument 
- --zone=- ZONE
- 
The name of the Google Compute Engine zone.
To set the zoneattribute:- 
provide the argument instanceon the command line with a fully specified name;
- 
provide the argument --zoneon the command line;
- 
set the property compute/zone.
 
- 
provide the argument 
 
- 
provide the argument 
- POLICY_FILE
- 
Path to a local JSON or YAML formatted file containing a valid policy.
The output of the get-iam-policycommand is a valid file, as is any JSON or YAML file conforming to the structure of a Policy.
 
- 
Instance resource - The instance to set the IAM policy of. The arguments in this
group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
- GCLOUD WIDE FLAGS
- 
These flags are available to all commands: --access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run $ gcloud helpfor details.
- API REFERENCE
- 
This command uses the compute/betaAPI. The full documentation for this API can be found at: https://cloud.google.com/compute/
- NOTES
- 
This command is currently in beta and might change without notice. These
variants are also available:
gcloud compute instances set-iam-policygcloud alpha compute instances set-iam-policy
      gcloud beta compute instances set-iam-policy
  
  
  Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-05-07 UTC.