gcloud beta iam roles describe - show metadata for a role

gcloud beta iam roles describeROLE_ID[--organization=ORGANIZATION    |--project=PROJECT_ID][GCLOUD_WIDE_FLAG …]

This command can fail for the following reasons:

• The role specified does not exist.
• The active user does not have permission to access the given role.

gcloudbetaiamrolesdescriberoles/spanner.databaseAdmin--organization=1234567

To print metadata for the rolespanner.databaseAdmin of the projectmyproject, run:

gcloudbetaiamrolesdescriberoles/spanner.databaseAdmin--project=myproject

To print metadata for a predefined role,spanner.databaseAdmin, run:

gcloudbetaiamrolesdescriberoles/spanner.databaseAdmin

ROLE_ID

ID of the role to describe. Curated roles example: roles/viewer. Custom rolesexample: CustomRole. For custom roles, you must also specify the--organization or--project flag.

At most one of these can be specified:

--organization=ORGANIZATION

Organization of the role you want to describe.

--project=PROJECT_ID

Project of the role you want to describe.

The Google Cloud project ID to use for this invocation. If omitted, then thecurrent project is assumed; the current project can be listed usinggcloudconfig list --format='text(core.project)' and can be set usinggcloud config set project PROJECTID.

--project and its fallbackcore/project property playtwo roles in the invocation. It specifies the project of the resource to operateon. It also specifies the project for API enablement check, quota, and billing.To specify a different project for quota and billing, use--billing-project orbilling/quota_project property.

Run$gcloud help for details.