- NAME
-
- gcloud compute instances set-iam-policy - set IAM policy for a Compute Engine instance
- SYNOPSIS
-
-
gcloud compute instances set-iam-policy
(INSTANCE
:--zone
=ZONE
)POLICY_FILE
[GCLOUD_WIDE_FLAG …
]
-
- DESCRIPTION
- Set IAM policy for a Compute Engine instance.
- EXAMPLES
-
The following command reads an IAM policy defined in a JSON file
policy.json
and sets it for the instance 'my-instance' and zone 'ZONE':gcloud compute instances set-iam-policy my-instance --zone=ZONE policy.json
See https://cloud.google.com/iam/docs/managing-policies for details of policy role and member types.
- POSITIONAL ARGUMENTS
-
-
Instance resource - The instance to set the IAM policy of. The arguments in this
group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
To set the
project
attribute:-
provide the argument
instance
on the command line with a fully specified name; -
provide the argument
--project
on the command line; -
set the property
core/project
.
This must be specified.
INSTANCE
-
ID of the instance or fully qualified identifier for the instance.
To set the
instance
attribute:-
provide the argument
instance
on the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
-
provide the argument
--zone
=ZONE
-
The name of the Google Compute Engine zone.
To set the
zone
attribute:-
provide the argument
instance
on the command line with a fully specified name; -
provide the argument
--zone
on the command line; -
set the property
compute/zone
.
-
provide the argument
-
provide the argument
POLICY_FILE
-
Path to a local JSON or YAML formatted file containing a valid policy.
The output of the
get-iam-policy
command is a valid file, as is any JSON or YAML file conforming to the structure of a Policy.
-
Instance resource - The instance to set the IAM policy of. The arguments in this
group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other ways.
- GCLOUD WIDE FLAGS
-
These flags are available to all commands:
--access-token-file
,--account
,--billing-project
,--configuration
,--flags-file
,--flatten
,--format
,--help
,--impersonate-service-account
,--log-http
,--project
,--quiet
,--trace-token
,--user-output-enabled
,--verbosity
.Run
$ gcloud help
for details. - API REFERENCE
-
This command uses the
compute/v1
API. The full documentation for this API can be found at: https://cloud.google.com/compute/ - NOTES
-
These variants are also available:
gcloud alpha compute instances set-iam-policy
gcloud beta compute instances set-iam-policy
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-07-30 UTC.