gcloud api-gateway apis add-iam-policy-binding - add IAM policy binding to a gateway

gcloud api-gateway apis add-iam-policy-bindingAPI--member=PRINCIPAL--role=ROLE[GCLOUD_WIDE_FLAG …]

Api resource - Name for API which IAM policy binding will be added to. Thisrepresents a Cloud resource. (NOTE) Some attributes are not given arguments inthis group but can be set in other ways.

To set theproject attribute:

• provide the argumentapi on the command line with a fully specifiedname;
• provide the argument--project on the command line;
• set the propertycore/project.

To set thelocation attribute:

• provide the argumentapi on the command line with a fully specifiedname;
• Location for API and API Configs. Defaults to global.

This must be specified.

API

ID of the api or fully qualified identifier for the api.

To set theapi attribute:

• provide the argumentapi on the command line.

--member=PRINCIPAL

The principal to add the binding for. Should be of the formuser|group|serviceAccount:email ordomain:domain.

Examples:user:test-user@gmail.com,group:admins@example.com,serviceAccount:test123@example.domain.com, ordomain:example.domain.com.

Some resources also accept the following special values:

• allUsers - Special identifier that represents anyone who is on theinternet, with or without a Google account.
• allAuthenticatedUsers - Special identifier that represents anyonewho is authenticated with a Google account or a service account.

--role=ROLE

Role name to assign to the principal. The role name is the complete path of apredefined role, such asroles/logging.viewer, or the role ID for acustom role, such asorganizations/{ORGANIZATION_ID}/roles/logging.viewer.

Run$gcloud help for details.