gcloud compute backend-services remove-iam-policy-binding - remove an IAM policy binding from a Compute Engine backend service

gcloud compute backend-services remove-iam-policy-bindingBACKEND_SERVICE_NAME--member=PRINCIPAL--role=ROLE[--global    |--region=REGION][GCLOUD_WIDE_FLAG …]

gcloudcomputebackend-servicesremove-iam-policy-bindingmy-backend-service--region=REGION--member='user:test-user@gmail.com'--role='roles/compute.loadBalancerServiceUser'

gcloudcomputebackend-servicesremove-iam-policy-bindingmy-backend-service--global--member='user:test-user@gmail.com'--role='roles/compute.loadBalancerServiceUser'

Seehttps://cloud.google.com/iam/docs/managing-policiesfor details of policy role and member types.

BACKEND_SERVICE_NAME

Name of the backend service to operate on.

--member=PRINCIPAL

The principal to remove the binding for. Should be of the formuser|group|serviceAccount:email ordomain:domain.

Examples:user:test-user@gmail.com,group:admins@example.com,serviceAccount:test123@example.domain.com, ordomain:example.domain.com.

Deleted principals have an additionaldeleted: prefix and a?uid=UID suffix, whereUID isa unique identifier for the principal. Example:deleted:user:test-user@gmail.com?uid=123456789012345678901.

Some resources also accept the following special values:

• allUsers - Special identifier that represents anyone who is on theinternet, with or without a Google account.
• allAuthenticatedUsers - Special identifier that represents anyonewho is authenticated with a Google account or a service account.

--role=ROLE

The role to remove the principal from.

At most one of these can be specified:

--global

If set, the backend service is global.

--region=REGION

Region of the backend service to operate on. Overrides the defaultcompute/region property value for this command invocation.

Run$gcloud help for details.