usingGoogle.Cloud.SecretManager.V1;usingGoogle.Cloud.Iam.V1;publicclassIamGrantAccessSample{publicPolicyIamGrantAccess(stringprojectId="my-project",stringsecretId="my-secret",stringmember="user:foo@example.com"){// Create the client.SecretManagerServiceClientclient=SecretManagerServiceClient.Create();// Build the resource name.SecretNamesecretName=newSecretName(projectId,secretId);// Get current policy.Policypolicy=client.GetIamPolicy(newGetIamPolicyRequest{ResourceAsResourceName=secretName,});// Add the user to the list of bindings.policy.AddRoleMember("roles/secretmanager.secretAccessor",member);// Save the updated policy.policy=client.SetIamPolicy(newSetIamPolicyRequest{ResourceAsResourceName=secretName,Policy=policy,});returnpolicy;}}

import("context""fmt""io"secretmanager"cloud.google.com/go/secretmanager/apiv1")// iamGrantAccess grants the given member access to the secret.funciamGrantAccess(wio.Writer,name,memberstring)error{// name := "projects/my-project/secrets/my-secret"// member := "user:foo@example.com"// Create the client.ctx:=context.Background()client,err:=secretmanager.NewClient(ctx)iferr!=nil{returnfmt.Errorf("failed to create secretmanager client: %w",err)}deferclient.Close()// Get the current IAM policy.handle:=client.IAM(name)policy,err:=handle.Policy(ctx)iferr!=nil{returnfmt.Errorf("failed to get policy: %w",err)}// Grant the member access permissions.policy.Add(member,"roles/secretmanager.secretAccessor")iferr=handle.SetPolicy(ctx,policy);err!=nil{returnfmt.Errorf("failed to save policy: %w",err)}fmt.Fprintf(w,"Updated IAM policy for %s\n",name)returnnil}

importcom.google.cloud.secretmanager.v1.SecretManagerServiceClient;importcom.google.cloud.secretmanager.v1.SecretName;importcom.google.iam.v1.Binding;importcom.google.iam.v1.GetIamPolicyRequest;importcom.google.iam.v1.Policy;importcom.google.iam.v1.SetIamPolicyRequest;importjava.io.IOException;publicclassIamGrantAccess{publicstaticvoidiamGrantAccess()throwsIOException{// TODO(developer): Replace these variables before running the sample.StringprojectId="your-project-id";StringsecretId="your-secret-id";Stringmember="user:foo@example.com";iamGrantAccess(projectId,secretId,member);}// Grant a member access to a particular secret.publicstaticvoidiamGrantAccess(StringprojectId,StringsecretId,Stringmember)throwsIOException{// Initialize client that will be used to send requests. This client only needs to be created// once, and can be reused for multiple requests. After completing all of your requests, call// the "close" method on the client to safely clean up any remaining background resources.try(SecretManagerServiceClientclient=SecretManagerServiceClient.create()){// Build the name from the version.SecretNamesecretName=SecretName.of(projectId,secretId);// Request the current IAM policy.PolicycurrentPolicy=client.getIamPolicy(GetIamPolicyRequest.newBuilder().setResource(secretName.toString()).build());// Build the new binding.Bindingbinding=Binding.newBuilder().setRole("roles/secretmanager.secretAccessor").addMembers(member).build();// Create a new IAM policy from the current policy, adding the binding.PolicynewPolicy=Policy.newBuilder().mergeFrom(currentPolicy).addBindings(binding).build();// Save the updated IAM policy.client.setIamPolicy(SetIamPolicyRequest.newBuilder().setResource(secretName.toString()).setPolicy(newPolicy).build());System.out.printf("Updated IAM policy for %s\n",secretId);}}}

/** * TODO(developer): Uncomment these variables before running the sample. */// const name = 'projects/my-project/secrets/my-secret';// const member = 'user:you@example.com';//// NOTE: Each member must be prefixed with its type. See the IAM documentation// for more information: https://cloud.google.com/iam/docs/overview.// Imports the Secret Manager libraryconst{SecretManagerServiceClient}=require('@google-cloud/secret-manager');// Instantiates a clientconstclient=newSecretManagerServiceClient();asyncfunctiongrantAccess(){// Get the current IAM policy.const[policy]=awaitclient.getIamPolicy({resource:name,});// Add the user with accessor permissions to the bindings list.policy.bindings.push({role:'roles/secretmanager.secretAccessor',members:[member],});// Save the updated IAM policy.awaitclient.setIamPolicy({resource:name,policy:policy,});console.log(`Updated IAM policy for${name}`);}grantAccess();

// Import the Secret Manager client library.use Google\Cloud\SecretManager\V1\Client\SecretManagerServiceClient;// Import the Secret Manager IAM library.use Google\Cloud\Iam\V1\Binding;use Google\Cloud\Iam\V1\GetIamPolicyRequest;use Google\Cloud\Iam\V1\SetIamPolicyRequest;/** * @param string $projectId Your Google Cloud Project ID (e.g. 'my-project') * @param string $secretId  Your secret ID (e.g. 'my-secret') * @param string $member Your member (e.g. 'user:foo@example.com') */function iam_grant_access(string $projectId, string $secretId, string $member): void{    // Create the Secret Manager client.    $client = new SecretManagerServiceClient();    // Build the resource name of the secret.    $name = $client->secretName($projectId, $secretId);    // Get the current IAM policy.    $policy = $client->getIamPolicy((new GetIamPolicyRequest)->setResource($name));    // Update the bindings to include the new member.    $bindings = $policy->getBindings();    $bindings[] = new Binding([        'members' => [$member],        'role' => 'roles/secretmanager.secretAccessor',    ]);    $policy->setBindings($bindings);    // Build the request.    $request = (new SetIamPolicyRequest)        ->setResource($name)        ->setPolicy($policy);    // Save the updated policy to the server.    $client->setIamPolicy($request);    // Print out a success message.    printf('Updated IAM policy for %s', $secretId);}

defiam_grant_access(project_id:str,secret_id:str,member:str)->iam_policy_pb2.SetIamPolicyRequest:"""    Grant the given member access to a secret.    """# Import the Secret Manager client library.fromgoogle.cloudimportsecretmanager# Create the Secret Manager client.client=secretmanager.SecretManagerServiceClient()# Build the resource name of the secret.name=client.secret_path(project_id,secret_id)# Get the current IAM policy.policy=client.get_iam_policy(request={"resource":name})# Add the given member with access permissions.policy.bindings.add(role="roles/secretmanager.secretAccessor",members=[member])# Update the IAM Policy.new_policy=client.set_iam_policy(request={"resource":name,"policy":policy})# Print data about the secret.print(f"Updated IAM policy on{secret_id}")

# project_id = "YOUR-GOOGLE-CLOUD-PROJECT"  # (e.g. "my-project")# secret_id  = "YOUR-SECRET-ID"             # (e.g. "my-secret")# member     = "USER-OR-ACCOUNT"            # (e.g. "user:foo@example.com")# Require the Secret Manager client library.require"google/cloud/secret_manager"# Create a Secret Manager client.client=Google::Cloud::SecretManager.secret_manager_service# Build the resource name of the secret.name=client.secret_pathproject:project_id,secret:secret_id# Get the current IAM policy.policy=client.get_iam_policyresource:name# Add new member to current bindingspolicy.bindings <<Google::Iam::V1::Binding.new(members:[member],role:"roles/secretmanager.secretAccessor")# Update IAM policynew_policy=client.set_iam_policyresource:name,policy:policy# Print a success message.puts"Updated IAM policy for#{secret_id}"