gcloud resource-manager org-policies set-policy

NAME

gcloud resource-manager org-policies set-policy - set Organization Policy

SYNOPSIS

gcloud resource-manager org-policies set-policy POLICY_FILE (--folder=FOLDER_ID     | --organization=ORGANIZATION_ID     | --project=PROJECT_ID) [GCLOUD_WIDE_FLAG …]

DESCRIPTION

Sets an Organization Policy associated with the specified resource from a file that contains the JSON or YAML encoded Organization Policy.

EXAMPLES

Organization policy list constraint YAML file example:

constraint: constraints/CONSTRAINT_NAME
listPolicy:
  deniedValues:
  - VALUE_A

Organization policy list constraint JSON file example:

{
  "constraint": "constraints/CONSTRAINT_NAME",
  "listPolicy": {
    "deniedValues": ["VALUE_A"]
  }
}

The following command sets an Organization Policy for a constraint on project foo-project from file /tmp/policy.yaml:

gcloud resource-manager org-policies set-policy --project=foo-project /tmp/policy.yaml

POSITIONAL ARGUMENTS

POLICY_FILE

JSON or YAML file with the Organization Policy.

REQUIRED FLAGS

Resource that is associated with the organization policy.

Exactly one of these must be specified:

--folder=FOLDER_ID

Folder ID.

--organization=ORGANIZATION_ID

Organization ID.

--project=PROJECT_ID

Project ID. Overrides the default core/project property value for this command invocation.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

These variants are also available:

gcloud alpha resource-manager org-policies set-policy

gcloud beta resource-manager org-policies set-policy