gcloud dataplex lakes deauthorize

NAME

gcloud dataplex lakes deauthorize - deauthorize a service agent from managing resources

SYNOPSIS

gcloud dataplex lakes deauthorize (--project-resource=PROJECT_RESOURCE     | --storage-bucket-resource=STORAGE_BUCKET_RESOURCE     | --bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE --secondary-project=SECONDARY_PROJECT) [GCLOUD_WIDE_FLAG …]

DESCRIPTION

The service agent for the primary project will have its IAM role revoked from a secondary project, a Cloud Storage bucket, or a BigQuery dataset.

EXAMPLES

To deauthorize the service agent in project test-project from managing resources in the project test-project2, run:

gcloud dataplex lakes deauthorize --project=test-project --project-resource=test-project2

To deauthorize the service agent in project test-project from managing the Cloud Storage bucket dataplex-storage-bucket, run:

gcloud dataplex lakes deauthorize --project=test-project --storage-bucket-resource=dataplex-storage-bucket

To deauthorize the service agent in project test-project from managing the BigQuery dataset test-dataset in project test-project2, run:

gcloud dataplex lakes deauthorize --project=test-project --bigquery-dataset-resource=test-dataset --secondary-project=test-project2

REQUIRED FLAGS

The resource for which the service agent's role will be revoked.

Exactly one of these must be specified:

--project-resource=PROJECT_RESOURCE

The identifier of the project whose resources the service agent will no longer manage.

--storage-bucket-resource=STORAGE_BUCKET_RESOURCE

The identifier of the Cloud Storage bucket that the service agent will no longer manage.

Fields to identify the BigQuery dataset.

--bigquery-dataset-resource=BIGQUERY_DATASET_RESOURCE

The identifier of the BigQuery dataset that the service agent will no longer manage.

This flag argument must be specified if any of the other arguments in this group are specified.

--secondary-project=SECONDARY_PROJECT

The identifier of the project where the BigQuery dataset is located.

This flag argument must be specified if any of the other arguments in this group are specified.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This variant is also available:

gcloud alpha dataplex lakes deauthorize