- NAME
-
- gcloud network-connectivity hubs groups add-iam-policy-binding - add an IAM policy binding to the IAM policy of a group resource
- SYNOPSIS
-
-
gcloud network-connectivity hubs groups add-iam-policy-binding
(GROUP
:--hub
=HUB
)--member
=PRINCIPAL
--role
=ROLE
[GCLOUD_WIDE_FLAG …
]
-
- DESCRIPTION
- Add an IAM policy binding to the IAM policy of a group resource. One binding consists of a member, a role, and an optional condition.
- EXAMPLES
-
To grant a user the
role on the group calledroles/networkconnectivity.groupUser
in the hub calledmy-group
', run the following command:my-hub
gcloud network-connectivity hubs groups add-iam-policy-binding my-group --member="user:username@gmail.com" --role="roles/networkconnectivity.groupUser" --hub="my-hub"
- POSITIONAL ARGUMENTS
-
-
Group resource - The group that you want to update. The arguments in this group
can be used to specify the attributes of this resource. (NOTE) Some attributes
are not given arguments in this group but can be set in other ways.
To set the
project
attribute:-
provide the argument
group
on the command line with a fully specified name; -
provide the argument
--project
on the command line; -
set the property
core/project
.
This must be specified.
GROUP
-
ID of the group or fully qualified identifier for the group.
To set the
group
attribute:-
provide the argument
group
on the command line.
This positional argument must be specified if any of the other arguments in this group are specified.
-
provide the argument
--hub
=HUB
-
Id of the hub.
To set the
hub
attribute:-
provide the argument
group
on the command line with a fully specified name; -
provide the argument
--hub
on the command line.
-
provide the argument
-
provide the argument
-
Group resource - The group that you want to update. The arguments in this group
can be used to specify the attributes of this resource. (NOTE) Some attributes
are not given arguments in this group but can be set in other ways.
- REQUIRED FLAGS
-
--member
=PRINCIPAL
-
The principal to add the binding for. Should be of the form
user|group|serviceAccount:email
ordomain:domain
.Examples:
user:test-user@gmail.com
,group:admins@example.com
,serviceAccount:test123@example.domain.com
, ordomain:example.domain.com
.Some resources also accept the following special values:
-
allUsers
- Special identifier that represents anyone who is on the internet, with or without a Google account. -
allAuthenticatedUsers
- Special identifier that represents anyone who is authenticated with a Google account or a service account.
-
--role
=ROLE
-
Role name to assign to the principal. The role name is the complete path of a
predefined role, such as
roles/logging.viewer
, or the role ID for a custom role, such asorganizations/{ORGANIZATION_ID}/roles/logging.viewer
.
- GCLOUD WIDE FLAGS
-
These flags are available to all commands:
--access-token-file
,--account
,--billing-project
,--configuration
,--flags-file
,--flatten
,--format
,--help
,--impersonate-service-account
,--log-http
,--project
,--quiet
,--trace-token
,--user-output-enabled
,--verbosity
.Run
$ gcloud help
for details. - API REFERENCE
-
This command uses the
networkconnectivity/v1
API. The full documentation for this API can be found at: https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest - NOTES
-
This variant is also available:
gcloud beta network-connectivity hubs groups add-iam-policy-binding
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-07-30 UTC.