- NAME
-
- gcloud network-connectivity hubs add-iam-policy-binding - add an IAM policy binding to the IAM policy of a hub resource
- SYNOPSIS
-
-
gcloud network-connectivity hubs add-iam-policy-binding
HUB
--member
=PRINCIPAL
--role
=ROLE
[GCLOUD_WIDE_FLAG …
]
-
- DESCRIPTION
- Add an IAM policy binding to the IAM policy of a hub resource. One binding consists of a member, a role, and an optional condition.
- EXAMPLES
-
To grant a user the
role on the hub calledroles/networkconnectivity.groupUser
, run the following command:my-hub
gcloud network-connectivity hubs add-iam-policy-binding my-hub --member="user:username@gmail.com" --role="roles/networkconnectivity.groupUser"
- POSITIONAL ARGUMENTS
-
-
Hub resource - The hub that you want to update. This represents a Cloud
resource. (NOTE) Some attributes are not given arguments in this group but can
be set in other ways.
To set the
project
attribute:-
provide the argument
hub
on the command line with a fully specified name; -
provide the argument
--project
on the command line; -
set the property
core/project
.
This must be specified.
HUB
-
ID of the hub or fully qualified identifier for the hub.
To set the
hub
attribute:-
provide the argument
hub
on the command line.
-
provide the argument
-
provide the argument
-
Hub resource - The hub that you want to update. This represents a Cloud
resource. (NOTE) Some attributes are not given arguments in this group but can
be set in other ways.
- REQUIRED FLAGS
-
--member
=PRINCIPAL
-
The principal to add the binding for. Should be of the form
user|group|serviceAccount:email
ordomain:domain
.Examples:
user:test-user@gmail.com
,group:admins@example.com
,serviceAccount:test123@example.domain.com
, ordomain:example.domain.com
.Some resources also accept the following special values:
-
allUsers
- Special identifier that represents anyone who is on the internet, with or without a Google account. -
allAuthenticatedUsers
- Special identifier that represents anyone who is authenticated with a Google account or a service account.
-
--role
=ROLE
-
Role name to assign to the principal. The role name is the complete path of a
predefined role, such as
roles/logging.viewer
, or the role ID for a custom role, such asorganizations/{ORGANIZATION_ID}/roles/logging.viewer
.
- GCLOUD WIDE FLAGS
-
These flags are available to all commands:
--access-token-file
,--account
,--billing-project
,--configuration
,--flags-file
,--flatten
,--format
,--help
,--impersonate-service-account
,--log-http
,--project
,--quiet
,--trace-token
,--user-output-enabled
,--verbosity
.Run
$ gcloud help
for details. - API REFERENCE
-
This command uses the
networkconnectivity/v1
API. The full documentation for this API can be found at: https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest - NOTES
-
This variant is also available:
gcloud beta network-connectivity hubs add-iam-policy-binding
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-07-30 UTC.