gcloud alpha compute instances set-iam-policy - set IAM policy for a Compute Engine instance

gcloud alpha compute instances set-iam-policy(INSTANCE :--zone=ZONE)POLICY_FILE[GCLOUD_WIDE_FLAG …]

gcloudalphacomputeinstancesset-iam-policymy-instance--zone=ZONEpolicy.json

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of policy role and member types.

Instance resource - The instance to set the IAM policy of. The arguments in thisgroup can be used to specify the attributes of this resource. (NOTE) Someattributes are not given arguments in this group but can be set in other ways.

To set theproject attribute:

• provide the argumentinstance on the command line with a fullyspecified name;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

INSTANCE

ID of the instance or fully qualified identifier for the instance.

To set theinstance attribute:

• provide the argumentinstance on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--zone=ZONE

The name of the Google Compute Engine zone.

To set thezone attribute:

• provide the argumentinstance on the command line with a fullyspecified name;
• provide the argument--zone on the command line;
• set the propertycompute/zone.

POLICY_FILE

Path to a local JSON or YAML formatted file containing a valid policy.

The output of theget-iam-policy command is a valid file, as is anyJSON or YAML file conforming to the structure of aPolicy.

Run$gcloud help for details.