gcloud alpha iam roles update Stay organized with collections Save and categorize content based on your preferences.
- NAME
- gcloud alpha iam roles update - update an IAM custom role
- SYNOPSIS
gcloud alpha iam roles updateROLE_ID(--organization=ORGANIZATION|--project=PROJECT_ID)[--file=FILE][--add-permissions=ADD_PERMISSIONS--description=DESCRIPTION--permissions=PERMISSIONS--remove-permissions=REMOVE_PERMISSIONS--stage=STAGE--title=TITLE][GCLOUD_WIDE_FLAG …]
- DESCRIPTION
(ALPHA)This command updates an IAM custom role.- EXAMPLES
- To update the role
from aYAML file, run:ProjectUpdatergcloudalphaiamrolesupdateProjectUpdater--organization=123--file=role_file_pathTo update the role
withflags, run:ProjectUpdatergcloudalphaiamrolesupdateProjectUpdater--project=myproject--permissions=permission1,permission2 - POSITIONAL ARGUMENTS
ROLE_ID- ID of the custom role to update. You must also specify the
--organizationor--projectflag.
- REQUIRED FLAGS
- Exactly one of these must be specified:
--organization=ORGANIZATION- Organization of the role you want to update.
--project=PROJECT_ID- Project of the role you want to update.
The Google Cloud project ID to use for this invocation. If omitted, then thecurrent project is assumed; the current project can be listed using
gcloudconfig list --format='text(core.project)'and can be set usinggcloud config set project PROJECTID.--projectand its fallbackcore/projectproperty playtwo roles in the invocation. It specifies the project of the resource to operateon. It also specifies the project for API enablement check, quota, and billing.To specify a different project for quota and billing, use--billing-projectorbilling/quota_projectproperty.
- Exactly one of these must be specified:
- OPTIONAL FLAGS
--file=FILE- The YAML file you want to use to update a role. Can not be specified with otherflags except role-id.
- The following flags determine the fields need to be updated. You can update arole by specifying the following flags, or you can update a role from a YAMLfile by specifying the file flag.
--add-permissions=ADD_PERMISSIONS- The permissions you want to add to the role. Use commas to separate them.
--description=DESCRIPTION- The description of the role you want to update.
--permissions=PERMISSIONS- The permissions of the role you want to set. Use commas to separate them.
--remove-permissions=REMOVE_PERMISSIONS- The permissions you want to remove from the role. Use commas to separate them.
--stage=STAGE- The state of the role you want to update.
--title=TITLE- The title of the role you want to update.
- GCLOUD WIDE FLAGS
- These flags are available to all commands:
--access-token-file,--account,--billing-project,--configuration,--flags-file,--flatten,--format,--help,--impersonate-service-account,--log-http,--project,--quiet,--trace-token,--user-output-enabled,--verbosity.Run
$gcloud helpfor details. - NOTES
- This command is currently in alpha and might change without notice. If thiscommand fails with API permission errors despite specifying the correct project,you might be trying to access an API with an invitation-only early accessallowlist. These variants are also available:
gcloudiamrolesupdategcloudbetaiamrolesupdate
Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2026-01-21 UTC.