gcloud beta ai-platform models add-iam-policy-binding - add IAM policy binding for a model

gcloud beta ai-platform models add-iam-policy-bindingMODEL--member=PRINCIPAL--role=ROLE[--region=REGION][GCLOUD_WIDE_FLAG …]

gcloudbetaai-platformmodelsadd-iam-policy-bindingmy_model--member='user:test-user@gmail.com'--role='roles/ml.admin'

To add an IAM policy binding for the role ofroles/ml.admin to theservice accounttest-proj1@example.domain.com, run:

gcloudbetaai-platformmodelsadd-iam-policy-bindingmy_model--member='serviceAccount:test-proj1@example.domain.com'--role='roles/ml.admin'

To add an IAM policy binding for the role ofroles/ml.admin for allauthenticated users on a model with identifiermy_model, run:

gcloudbetaai-platformmodelsadd-iam-policy-bindingmy_model--member='allAuthenticatedUsers'--role='roles/ml.admin'

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of policy role and principal types.

MODEL

Name of the model.

--member=PRINCIPAL

The principal to add the binding for. Should be of the formuser|group|serviceAccount:email ordomain:domain.

Examples:user:test-user@gmail.com,group:admins@example.com,serviceAccount:test123@example.domain.com, ordomain:example.domain.com.

Some resources also accept the following special values:

• allUsers - Special identifier that represents anyone who is on theinternet, with or without a Google account.
• allAuthenticatedUsers - Special identifier that represents anyonewho is authenticated with a Google account or a service account.

--role=ROLE

Role name to assign to the principal. The role name is the complete path of apredefined role, such asroles/logging.viewer, or the role ID for acustom role, such asorganizations/{ORGANIZATION_ID}/roles/logging.viewer.

--region=REGION

Google Cloud region of the regional endpoint to use for this command. For theglobal endpoint, the region needs to be specified asglobal.

Learn more about regional endpoints and see a list of available regions:https://cloud.google.com/ai-platform/prediction/docs/regional-endpoints

REGION must be one of:global,asia-east1,asia-northeast1,asia-southeast1,australia-southeast1,europe-west1,europe-west2,europe-west3,europe-west4,northamerica-northeast1,us-central1,us-east1,us-east4,us-west1.

Run$gcloud help for details.