gcloud beta iam policy-bindings update - update PolicyBinding instance

gcloud beta iam policy-bindings update(POLICY_BINDING :--folder=FOLDER--location=LOCATION--organization=ORGANIZATION)[--async][--display-name=DISPLAY_NAME][--etag=ETAG][--annotations=[ANNOTATIONS,…]    |--update-annotations=[UPDATE_ANNOTATIONS,…]--clear-annotations    |--remove-annotations=REMOVE_ANNOTATIONS][--clear-condition--condition-description=CONDITION_DESCRIPTION--condition-expression=CONDITION_EXPRESSION--condition-location=CONDITION_LOCATION--condition-title=CONDITION_TITLE][GCLOUD_WIDE_FLAG …]

PolicyBinding resource - Identifier. The name of the policy binding, in theformat{binding_parent/locations/{location}/policyBindings/{policy_binding_id}.The binding parent is the closest Resource Manager resource (project, folder, ororganization) to the binding target.

Format:

• projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id}
• projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id}
• folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id}
• organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id}The arguments in this group can be used to specify the attributes of thisresource. (NOTE) Some attributes are not given arguments in this group but canbe set in other ways.

To set theproject attribute:

• provide the argumentpolicy_binding on the command line with afully specified name;
• provide the argument--project on the command line;
• set the propertycore/project. This resource can be one of thefollowing types: [iam.folders.locations.policyBindings,iam.organizations.locations.policyBindings,iam.projects.locations.policyBindings].

This must be specified.

POLICY_BINDING

ID of the policyBinding or fully qualified identifier for the policyBinding.

To set thepolicy_binding attribute:

• provide the argumentpolicy_binding on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--folder=FOLDER

The folder id of the policyBinding resource.

To set thefolder attribute:

• provide the argumentpolicy_binding on the command line with afully specified name;
• provide the argument--folder on the command line. Must bespecified for resource of type [iam.folders.locations.policyBindings].

--location=LOCATION

The location id of the policyBinding resource.

To set thelocation attribute:

• provide the argumentpolicy_binding on the command line with afully specified name;
• provide the argument--location on the command line.

--organization=ORGANIZATION

The organization id of the policyBinding resource.

To set theorganization attribute:

• provide the argumentpolicy_binding on the command line with afully specified name;
• provide the argument--organization on the command line. Must bespecified for resource of type [iam.organizations.locations.policyBindings].

--async

Return immediately, without waiting for the operation in progress to complete.

--display-name=DISPLAY_NAME

The description of the policy binding. Must be less than or equal to 63characters.

--etag=ETAG

The etag for the policy binding. If this is provided on update, it must matchthe server's etag.

Update annotations.

At most one of these can be specified:

--annotations=[ANNOTATIONS,…]

Set annotations to new value. User-defined annotations. Seehttps://google.aip.dev/148#annotationsfor more details such as format and size limitations.

KEY

SetsKEY value.

VALUE

SetsVALUE value.

Shorthand Example:

--annotations=string=string

JSON Example:

--annotations='{"string": "string"}'

File Example:

--annotations=path_to_file.(yaml|json)

Or at least one of these can be specified:

--update-annotations=[UPDATE_ANNOTATIONS,…]

Update annotations value or add key value pair. User-defined annotations. Seehttps://google.aip.dev/148#annotationsfor more details such as format and size limitations.

KEY

SetsKEY value.

VALUE

SetsVALUE value.

Shorthand Example:

--update-annotations=string=string

JSON Example:

--update-annotations='{"string": "string"}'

File Example:

--update-annotations=path_to_file.(yaml|json)

At most one of these can be specified:

--clear-annotations

Clear annotations value and set to empty map.

--remove-annotations=REMOVE_ANNOTATIONS

Remove existing value from map annotations. Setsremove_annotationsvalue.Shorthand Example:

--remove-annotations=string,string

JSON Example:

--remove-annotations=["string"]

File Example:

--remove-annotations=path_to_file.(yaml|json)

Represents a textual expression in the Common Expression Language (CEL) syntax.CEL is a C-like expression language. The syntax and semantics of CEL aredocumented athttps://github.com/google/cel-spec.

Example (Comparison):

title:"Summary size limit"description:"Determines if a summary is less than 100 chars"expression:"document.summary.size() < 100"

Example (Equality):

title:"Requestor is owner"description:"Determines if requestor is the document owner"expression:"document.owner == request.auth.claims.email"

Example (Logic):

title:"Public documents"description:"Determine whether the document should be publicly visible"expression:"document.type != 'private' && document.type != 'internal'"

Example (Data Manipulation):

title:"Notification string"description:"Create a notification string with a timestamp."expression:"'New message received at ' + string(document.create_time)"

The exact variables and functions that may be referenced within an expressionare determined by the service that evaluates it. See the service documentationfor additional information.

--clear-condition

Set googleIamV3betaPolicyBinding.condition back to default value.

--condition-description=CONDITION_DESCRIPTION

Description of the expression. This is a longer text which describes theexpression, e.g. when hovered over it in a UI.

--condition-expression=CONDITION_EXPRESSION

Textual representation of an expression in Common Expression Language syntax.

--condition-location=CONDITION_LOCATION

String indicating the location of the expression for error reporting, e.g. afile name and a position in the file.

--condition-title=CONDITION_TITLE

Title for the expression, i.e. a short string describing its purpose. This canbe used e.g. in UIs which allow to enter the expression.

Run$gcloud help for details.